We’ve confirmed a KVM 0day through our Vercel Sandbox bounty program. Affecting the industry’s gold standard solution for Linux virtualization. 2026 is wild! Thankful to Paulos and other researchers helping us make the most secure sandbox for agents. Full writeup coming.
Full VM escape zeroday (guest>host root in industry standard hypervisors)! More soon
65
70
1,087
93,023
Replying to @rauchg
Paying researchers to attack the sandbox boundary directly is a sensible way to find this class of bug. Will the writeup say which hypervisor layers were affected?

Oct 3, 2026 · 3:55 PM UTC

2
942
Sort replies: Relevant Recent Liked