# Vercel — Findings from the $1M Vercel Sandbox challenge

- Company: Vercel (vercel.com)
- Announced: 2026-10-14T07:00:00+00:00
- Category: not stated
- Coverage: not counted
- Announcement: no
- Group: routine
- Source: https://vercel.com/blog/findings-from-the-1-million-dollar-vercel-sandbox-challenge
- Record: https://forck.live/items/22414-findings-from-the-1m-vercel-sandbox-challenge
- Subject: v0 / AI SDK / AI Gateway

Vercel published findings from its $1M Sandbox challenge, reporting 1,285 reports, $242,000 in bounties paid, and one Linux kernel zero-day vulnerability discovered by researcher Paulos Yibelo. The kernel defect allowed leaking host memory, crashing the host, and executing code on the host. No reports showed access to customer data.

## Evidence

Verbatim from https://vercel.com/blog/findings-from-the-1-million-dollar-vercel-sandbox-challenge:

> The most severe finding was the defect in the upstream Linux kernel.

---

Record: https://forck.live/items/22414-findings-from-the-1m-vercel-sandbox-challenge
Catalogue: https://forck.live/llms.txt
Current issue: https://forck.live/feed.md