Vercel: findings from the one-million-dollar Sandbox challenge

Evidence record

First-party disclosure separating a production-observed host memory leak, laboratory host execution, disk block reuse and cross-account snapshots.

Read the original source ↗

Claim-level citations (3)

• supportsVercel Sandbox exposed recycled disk blocks across deleted tenant sandboxes: Vercel reported an internal finding in which newly allocated sandbox storage could read recycled Linux device-mapper blocks left by deleted sandboxes.

  Pre-bounty internal findings, device-mapper cross-tenant data leak

• supportsVercel Sandbox guest packets disclosed host memory through Linux networking: A researcher demonstrated that packets emitted from Vercel Sandbox could carry host memory into observable network traffic on production sandboxes.

  The kernel zero day; Leaking host memory; Crashing the host and executing code on the host

• supportsGuest-selected Vercel Sandbox snapshot storage could cross account boundaries: An investigator changed snapshot metadata returned from a guest so that restoring a snapshot under one account materialized files owned by a different account they also controlled.

  Cross-tenant disk snapshot restore (with limits); fix shipped within one week