The flaw is a zero-day in the Kernel-based Virtual Machine (KVM) that allows a guest to gain root access to the host. Vercel confirmed the 'Critical' bug, which enables cross-tenant access on EC2 hosts, and paid its maximum $50,000 bounty to the original discoverer, Paulos Yibelo. As other firms now offer rewards of $200,000 for escapes from Firecracker or gVisor, industry experts warn that more than 1,000 recent kernel CVEs make current sandboxes vulnerable to capable agents.
Wednesday, October 21, 2026
Story
AI Agent Rediscovers KVM VM Escape in 2 Hours
Cybersecurity16 days ago
An automated cyber-security model identified an end-to-end path for breaking out of an isolated virtualization environment. Researcher 0x4d31 reported that the tool validated the exploit in approximately two hours after being given a single hint, demonstrating how adversarial models can autonomously replicate complex vulnerability discoveries usually reserved for human researchers.
Looking for more context or analysis?
Tilt chat provides reliable, tailored insights, alerts, and automations.