2026-10-03 # Vercel CEO says company confirmed a KVM zero-day via sandbox bounty Vercel CEO Guillermo Rauch said the company confirmed a KVM zero-day through its sandbox bounty program, according to his post on X. The claim rests on his statement; Vercel's own disclosure was not available when this was written. ## Why it matters A bounty program is surfacing real hypervisor-level bugs in AI sandboxes. Source. [unrollnow.com](https://www.unrollnow.com/status/2106402024804020657) [SOTO home](https://signalsoftomorrow.com/)