#Firecracker

Vercel confirms KVM zero-day allowing full guest-to-host VM escape

Vercel's CEO confirmed a KVM zero-day reported via the Vercel Sandbox bounty program that reportedly lets guest code gain root on the host. No CVE or patch has been published yet.

4 days ago