# Vercel discloses Linux kernel flaw enabling sandbox escape

_Published Wednesday, October 14, 2026 at 6:06 PM EDT · Security, Infrastructure · Latest · Tier 1 — Major_

![Vercel discloses Linux kernel flaw enabling sandbox escape — Primary](https://assets.vercel.com/image/upload/contentful/image/e5382hct74si/5whM0EM20wGHLVBkIkNixX/6b6fd4a26e9b99e9e50b83daa3b63111/sandbox-challenge-findings-v1.png)

Vercel disclosed a Linux kernel networking flaw that a researcher used to leak host memory from production sandboxes. The company said specially crafted packets also enabled host crashes and administrator-level code execution on the researcher's own machines configured to match Vercel Sandbox.

The finding came from a security challenge launched in August. Vercel said it worked with the researcher, AWS and other partners to mitigate the vulnerability. Kernel fixes remain under private review, with CVEs pending.

Vercel said no reports demonstrated access to customer files, secrets or application data. The production demonstration involved memory leakage; the crash and code-execution demonstrations used the researcher's KVM and Firecracker machines.

## Sources

- [Vercel News](https://vercel.com/blog/findings-from-the-1-million-dollar-vercel-sandbox-challenge)

---
Canonical: https://techandbusiness.org/newswire/ehaF6S9eZHePGRP5eE0vSX
Published: 2026-10-14T22:06:32.070Z
Story chronology: 2026-10-14T07:00:00.000Z
Retrieved: 2026-10-15T01:11:43.533Z
Publisher: Tech & Business (techandbusiness.org)