A guest-to-host breakout is a virtualization flaw that allows code or actions inside a virtual machine to affect the host system running that VM. In practice, this means a boundary that should isolate the guest can be crossed, letting an attacker escape the sandbox-like environment of the virtual machine.
This matters because hosts usually hold sensitive files, credentials, development tools, and access to other workloads. A breakout often requires strong foothold inside the guest, such as administrative access, but that does not make it harmless: once the guest is compromised, the attacker may pivot to the host and gain broader control. Defenders reduce this risk by patching hypervisors quickly, limiting host-guest integration features, and treating untrusted VMs as high-risk environments.