Proxmox Virtual Environment - Security Advisories

[ProxmoxSecurityAdvisory]

Subject: PSA-2026-00072-1: Missing buffer limits when processing Qemu guest agent responses​

Advisory date: 2026-10-19

Packages: qemu-server

Details:

An attacker with access to a VM with configured guest agent can consume excessive memory usage on the host side during QGA response processing.

This issue was reported privately by Project Loupe.

Fixed in:
- qemu-server >= 9.2.11

 

[ProxmoxSecurityAdvisory]

Subject: PSA-2026-00073-1: pvedaemon denial-of-service via QEMU guest agent file-read command​

Advisory date: 2026-10-19

Packages: qemu-server

Details:

Insufficient hardening of the QEMU guest agent file-read handling allowed a malicious guest agent implementation in a VM to cause pvedaemon to allocate additional memory until it triggers an out-of-memory kill action by the kernel.

This issue was privately reported by Martin Vlach <mr.huge@seznam.cz> / <dev@ehlas.cz>.

Fixed in:
- qemu-server >= 9.2.11

 

[ProxmoxSecurityAdvisory]

Subject: PSA-2026-00074-1: QEMU HMP: incomplete permissions checks for gpa2hpa/gpa2hva/i commands​

Advisory date: 2026-10-19

Packages: qemu-server

Details:

The gpa2hpa/gpa2hva/i of QEMU's HMP interface were only requiring Sys.Modify privileges, instead of being restricted to root. These commands potentially allow leaking information about the memory layout of the QEMU process, or read memory from I/O ports, which might have security implications.

This issue was privately reported by Martin Vlach <mr.huge@seznam.cz> / <dev@ehlas.cz>.

Fixed in:
- qemu-server >= 9.2.11