2026-10-04 01:36 UTC
So what's the over/under that this Vercel KVM escape 0-day is
- a Vercel only thing
- an AWS Firecracker only thing
- an actual all-KVMs affected thing ?
https://nitter.cf/rauchg/status/2106402024804020657#m
(The overall vibes I'm getting here make me skeptical.)
Replies (1)
-
@jschauma@mstdn.social 2026-10-04 13:26
Kinda feel that unless this is a Vercel-only thing, dropping this note seems irresponsible to me: If it affects Firecracker, you need to coordinate with AWS. Amazon should not appreciate prior disclosure. If it's generic, you absolutely need to coordinate with Everybody(tm). That could take weeks. (And $50K seems reasonable for a Vercel-only thing, but a generic KVM escape ought to be worth a lot more.)