A vulnerability called PwnEscape, tracked as CVE-2026-99999, affects Vercel sandboxes, according to the source report.
The name points to a sandbox escape, which is the kind of flaw that matters most for services that run untrusted code.
Source: thehackernews.com, reported 10-16. https://thehackernews.com/2026/10/critical-pwnescape-linux-kernel.html