Vercel Reportedly Pays $50,000 for KVM Sandbox Escape
· 1:16 · Watch on YouTube ↗
Summary
A researcher reportedly received a $50,000 Vercel bounty for a KVM guest-to-host sandbox escape. Vercel’s CEO confirmed the zero-day was found through its bug bounty program; Vercel uses Firecracker microVMs to isolate sandboxed code.
Key points
- The researcher described the vulnerability as a guest-to-host root escape, allowing admin-level control of the host from inside a virtual machine.
- Vercel’s CEO publicly confirmed that the KVM zero-day was found through the company’s bug bounty program.
- The reported $50,000 payout is based on a bounty-notification screenshot shared by the researcher on Twitter.
- Vercel uses Firecracker microVMs, which rely on KVM to isolate code running in its sandboxes, including code run by AI agents.
- The video says Vercel offered a $1 million bounty pool in August, with payouts of up to $50,000 per report for breaking sandbox boundaries.
- A guest-to-host escape breaks the separation intended to contain potentially dangerous code.