🕵️ RESEARCH & DEEP DIVES
- Vercel confirms KVM zero-day VM escape allowing guest-to-host root access, awards $50,000 bounty
Vercel has confirmed a KVM zero-day vulnerability that allows a full VM escape from guest to host root, reported by researcher Paulos Yibelo.- Affects KVM, the Linux kernel virtualization subsystem, which underpins Vercel Sandbox, Firecracker microVMs, AWS EC2 Nitro, Lambda, Fargate, and Google Cloud Compute Engine.
- The flaw allows code inside a guest VM to escape isolation and gain root access on the physical host, breaking the microVM security boundary used to contain untrusted workloads and AI agents.
- The bug was found through Vercel's Sandbox bug bounty program; Vercel paid $50,000, the program's maximum single-report award, and CEO Guillermo Rauch confirmed the zero-day.
- No CVE, CVSS score, affected kernel versions, exploit chain details, or patch have been disclosed; a full technical write-up is pending.
- Researcher Paulos Yibelo announced the finding on October 3, 2026, describing it as a 'full VM escape zeroday' in industry-standard hypervisors.
Sources 📄 Source: x.com · 📎 Coverage: tech-insider.org · 👁 via Cyber Security News, cryptika.com (discovered)