A local privilege escalation vulnerability exists in the QEMU Guest Agent (qga) due to improper handling of symbolic links in the guest-ssh-add-authorized-keys command handler. An unprivileged local user can exploit this flaw via deterministic directory-symlink bypass or a TOCTOU file-symlink race to gain ownership of arbitrary root-owned files or directories, potentially leading to root access. Exploitation requires an external management layer such as libvirt to trigger the vulnerable code path. Red Hat has issued a security advisory with patches available for Red Hat Enterprise Linux 9 and related variants.