Comment by thisisauserid 21 hours ago Firecracker VMs run on AWS. Odd that the article doesn't mention that. 14 comments thisisauserid Reply whizzter 21 hours ago Firecracker is open source and possibly others use it, AWS sells services with it though. tptacek 21 hours ago (A more complete way to say this is that Firecracker is the engine built to run AWS Lambda and AWS Fargate). tcdent 21 hours ago It has notable adoption in the agent sandbox space where this type of vulnerability is especially volatile. thisisauserid 21 hours ago > The target was Firecracker v1.16.1 on x86-64, with host kernel 7.0.0-1011-aws. sscaryterry 20 hours ago Firecracker v1.17.0 was released 10 September, so the version is ancient. 2 replies → pier25 20 hours ago Fly uses it too afaik tptacek 20 hours ago Basically everyone in cloud-land uses it at this point. 1 reply → wrongquery_dev 20 hours ago [dead] Betelbuddy 20 hours ago Not affected https://aws.amazon.com/security/security-bulletins/2026-137-... sscaryterry 20 hours ago The article is light on details, it is LLM slop.
whizzter 21 hours ago Firecracker is open source and possibly others use it, AWS sells services with it though. tptacek 21 hours ago (A more complete way to say this is that Firecracker is the engine built to run AWS Lambda and AWS Fargate). tcdent 21 hours ago It has notable adoption in the agent sandbox space where this type of vulnerability is especially volatile. thisisauserid 21 hours ago > The target was Firecracker v1.16.1 on x86-64, with host kernel 7.0.0-1011-aws. sscaryterry 20 hours ago Firecracker v1.17.0 was released 10 September, so the version is ancient. 2 replies → pier25 20 hours ago Fly uses it too afaik tptacek 20 hours ago Basically everyone in cloud-land uses it at this point. 1 reply → wrongquery_dev 20 hours ago [dead]
tptacek 21 hours ago (A more complete way to say this is that Firecracker is the engine built to run AWS Lambda and AWS Fargate).
tcdent 21 hours ago It has notable adoption in the agent sandbox space where this type of vulnerability is especially volatile.
thisisauserid 21 hours ago > The target was Firecracker v1.16.1 on x86-64, with host kernel 7.0.0-1011-aws. sscaryterry 20 hours ago Firecracker v1.17.0 was released 10 September, so the version is ancient. 2 replies →
sscaryterry 20 hours ago Firecracker v1.17.0 was released 10 September, so the version is ancient. 2 replies →
pier25 20 hours ago Fly uses it too afaik tptacek 20 hours ago Basically everyone in cloud-land uses it at this point. 1 reply →
Firecracker is open source and possibly others use it, AWS sells services with it though.
(A more complete way to say this is that Firecracker is the engine built to run AWS Lambda and AWS Fargate).
It has notable adoption in the agent sandbox space where this type of vulnerability is especially volatile.
> The target was Firecracker v1.16.1 on x86-64, with host kernel 7.0.0-1011-aws.
Firecracker v1.17.0 was released 10 September, so the version is ancient.
2 replies →
Fly uses it too afaik
Basically everyone in cloud-land uses it at this point.
1 reply →
[dead]
Not affected https://aws.amazon.com/security/security-bulletins/2026-137-...
The article is light on details, it is LLM slop.