Vercel's $1M Sandbox challenge drew 1,285 reports and surfaced a Linux kernel zero-day
cramforce · x · 2026-10-15
Vercel's $1M Sandbox Challenge Results
Vercel ran a $1M bounty challenge (with Trail of Bits auditing) inviting hackers to escape its Sandbox isolation environment: 1,285 reports over two weeks, $242,000 paid out, and no reports of customer data compromise.
Key finding: Linux kernel zero-day
- Submitted on day three by HackerOne researcher Paulos Yibelo from a standard sandbox with no special access
- Crafted packets from inside the microVM exploit a flaw in the Linux kernel networking stack, enabling three attacks:
- Leaking host memory over the network (continuously)
- Crashing the host machine
- Executing code on the host
More from Infra
- Nvidia's Ian Buck on Why GPUs Keep Winning: Blackwell Perf Up 4x Since Launch — firstadopter · 2026-10-15
- AI-rewritten libtiff closes gap to ~10x of C version, fueling hopes of retiring buggy C libs — jd_pressman · 2026-10-15
- PyTorch Day Japan 2026 agenda live: Tokyo event Dec 10, early-bird saves ¥3,000 — PyTorch · 2026-10-15
- Liquid AI releases LFM2.5-24B-A2B, a sparse model built for fast on-device agents — gmays · 2026-10-15
- Analyst asks: how many mechanics does a 500MW-to-GW data center need for manifold coolers — BenBajarin · 2026-10-15
- Cargo Demos 1.6T ALC Interconnect, ALC+AEC Cover More GPU Cluster Needs — BenBajarin · 2026-10-15