Vercel Sandbox Challenge Finds Linux Kernel Flaws, No Customer Data Access

Summary

Vercel says a two-week, $1 million sandbox challenge produced 1,285 filings and found two Linux kernel networking flaws, but no reports demonstrated access to customer data. Fixes are under private review.

Key points

Vercel received 1,285 reports during its August 18–September 1 sandbox bug-bounty challenge; it had validated one Critical, seven High, 15 Medium, 49 Low and 19 Informative findings at the time of reporting.
The most significant filing identified two defects in the Linux kernel networking stack: one can leak host-kernel memory, and another can deterministically crash the host.
Vercel said none of the reports demonstrated access to real customer data. It said the kernel fixes were under private review and CVEs were pending.
Vercel reported about $325,000 in committed payouts, with report triage continuing until October 1.
The company developed an AI agent to check reports against program policy, find duplicates, and run proof-of-concept code in a Vercel Sandbox; it plans to open-source the agent.
Two Trail of Bits engineers produced 20 findings and advised Vercel to treat values returned from the microVM as tenant input, deriving them server-side or signing them with a key inaccessible to the guest.

Article Details

Event Type: Vercel completed a two-week sandbox bug-bounty challenge that uncovered Linux kernel networking-stack flaws and other findings.
Impact: The two kernel defects reportedly include one that leaks host-kernel memory and another that deterministically crashes the host. The flaws may affect cloud providers using the same Linux kernel isolation layer. Vercel reported that no submission demonstrated access to customer data; fixes were under private review and CVEs were pending.

Vendors

VercelThe Vercel sandbox, a Firecracker‑based microVM environment, is an isolation tool for untrusted AI‑agent code.

Products

Linux kernelThe most important filing found two independent defects in the Linux kernel’s networking stack (not Vercel’s own code).Vercel SandboxThe Vercel sandbox, a Firecracker‑based microVM environment, is an isolation tool for untrusted AI‑agent code.

Tools

FirecrackerThe Vercel sandbox, a Firecracker‑based microVM environment, is an isolation tool for untrusted AI‑agent code.Kimi K3Vercel plans to open source this agent running on Kimi K3.Vercel Eve agent frameworkvolume increased, Vercel developed its own agentic triaging solution with an agent built on the Vercel Eve agent framework.