Replit's custom kernel sandbox dodged 96% of 6,211 audited Linux CVEs
amasad · x · 2026-11-06
Replit CEO Amjad Masad details the company's new microVM-based sandbox engine, giving each AI agent sandbox its own minimal Linux kernel.
An audit of 6,211 Linux-CNA CVEs published June 1–November 4, 2026 shows Replit avoided 5,969 of them (96.1%) via prompt upstream fixes or code exclusion: 4,375 (70.4%) were fixed before disclosure, and 676 (10.9%) were excluded by configuration. At least 15 CVEs were flagged as enabling or potentially enabling local privilege escalation.
Key design decisions: a minimal guest kernel, network controls enforced outside the guest, and credential brokers that let workloads make authorized requests without holding reusable credentials.
Related event: Replit Rewrites Sandbox Engine from Containers to MicroVMs for AI Agents(2 posts)→
More from coding & agent
- OpenClaw Ecosystem Hits 47 Products; Users Say Agents Outgrew the Chatbot Label — heyneighbor · 2026-11-06
- Full workflow: idea to finished AI video with Claude Code/Codex + Seedance, minimal re-rolls — dotey · 2026-11-06
- New vibe coder replicates Autodesk Maya in 3 hours with ChatGPT, asks for better workflow — Kiiaro · 2026-11-06
- Anthropic engineer confirms he's officially building Claude Code Desktop — maxleiter · 2026-11-06
- "Did your agents patch today's CVE?": dev shows agent running in the dark — aniketmaurya · 2026-11-06
- Dev fixes trivial bugs just to stop Claude nagging about them — jmugan · 2026-11-06