Vercel confirms KVM zero

Feeds.4Sysops •IT News • October 6, 2026

Vercel has confirmed a KVM zero-day reported through its Sandbox bug bounty program, with researcher Paulos Yibelo claiming it enables a virtual machine to escape and gain root access on its host. Vercel Sandbox runs Firecracker microVMs on KVM, but the vulnerability’s technical details and affected versions have not been made public. There is not yet enough information to determine which KVM deployments are affected or what fix administrators should apply. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical KVM Zero-Day Allows VM Escape and Host Root Access Vercel has confirmed a critical KVM zero-day vulnerability discovered by researcher Paulos Yibelo, enabling guest virtual machines to escape and gain root access on the host system. The flaw affects KVM, a widely used Linux virtualization technology, but specific technical details and affected versions have not been disclosed. The vulnerability could allow attackers to compromise entire cloud environments by gaining control over all tenants and virtual machines running on a server. No confirmed exploitation has been reported yet, and no CVE has been assigned. The discovery has sparked debate over the $50,000 bug bounty awarded to Yibelo, with some experts suggesting it is insufficient given the potential impact. Vercel's Sandbox environment, which utilizes KVM and Firecracker microVMs, is particularly at risk. A full technical write-up is expected to provide more details in the future. 2 sources 56

Extracted Entities

Vercel confirms KVM zero

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (1)

Platforms (1)

Tools (1)