Vercel has confirmed a KVM zero-day discovered through its Sandbox bug bounty program. Security researcher Paulos Yibelo says the vulnerability allowed him to escape a guest virtual machine and obtain root access on the host. The finding raises concerns about isolation between cloud workloads. However, public disclosures do not yet identify affected software versions, the…