Vercel's $1M sandbox escape challenge: 1,285 reports, $242K bounties, one Linux kernel zero-day

cramforce · x · 2026-10-15

Vercel offered $1M to escape its Sandbox. Results: 1,285 reports, $242,000 in bounties paid, one Linux kernel zero-day discovered, and no customer data compromise.

Guillermo Rauch frames it as a landmark for agent containment: OpenAI's earlier agent escape was "escaping the network" (gaining internet access by hacking another system), while this challenge surfaced something bigger — a white-hat researcher using a swarm of AI agents to pierce the Linux virtualization boundary that nearly every cloud sandbox provider relies on.

Related event: Vercel's $1M Sandbox Challenge Yields Linux Kernel Zero-Day From 1,285 Reports(2 posts)→

Original post →

More from Infra

Infra channel →