← Back to context Comment by thisisauserid 20 hours ago Firecracker VMs run on AWS. Odd that the article doesn't mention that. 14 comments thisisauserid Reply whizzter 20 hours ago Firecracker is open source and possibly others use it, AWS sells services with it though. tptacek 19 hours ago (A more complete way to say this is that Firecracker is the engine built to run AWS Lambda and AWS Fargate). tcdent 19 hours ago It has notable adoption in the agent sandbox space where this type of vulnerability is especially volatile. thisisauserid 19 hours ago > The target was Firecracker v1.16.1 on x86-64, with host kernel 7.0.0-1011-aws. sscaryterry 19 hours ago Firecracker v1.17.0 was released 10 September, so the version is ancient. 2 replies → pier25 19 hours ago Fly uses it too afaik tptacek 19 hours ago Basically everyone in cloud-land uses it at this point. 1 reply → wrongquery_dev 19 hours ago [dead] Betelbuddy 19 hours ago Not affected https://aws.amazon.com/security/security-bulletins/2026-137-... sscaryterry 19 hours ago The article is light on details, it is LLM slop.
whizzter 20 hours ago Firecracker is open source and possibly others use it, AWS sells services with it though. tptacek 19 hours ago (A more complete way to say this is that Firecracker is the engine built to run AWS Lambda and AWS Fargate). tcdent 19 hours ago It has notable adoption in the agent sandbox space where this type of vulnerability is especially volatile. thisisauserid 19 hours ago > The target was Firecracker v1.16.1 on x86-64, with host kernel 7.0.0-1011-aws. sscaryterry 19 hours ago Firecracker v1.17.0 was released 10 September, so the version is ancient. 2 replies → pier25 19 hours ago Fly uses it too afaik tptacek 19 hours ago Basically everyone in cloud-land uses it at this point. 1 reply → wrongquery_dev 19 hours ago [dead]
tptacek 19 hours ago (A more complete way to say this is that Firecracker is the engine built to run AWS Lambda and AWS Fargate).
tcdent 19 hours ago It has notable adoption in the agent sandbox space where this type of vulnerability is especially volatile.
thisisauserid 19 hours ago > The target was Firecracker v1.16.1 on x86-64, with host kernel 7.0.0-1011-aws. sscaryterry 19 hours ago Firecracker v1.17.0 was released 10 September, so the version is ancient. 2 replies →
sscaryterry 19 hours ago Firecracker v1.17.0 was released 10 September, so the version is ancient. 2 replies →
pier25 19 hours ago Fly uses it too afaik tptacek 19 hours ago Basically everyone in cloud-land uses it at this point. 1 reply →
Firecracker is open source and possibly others use it, AWS sells services with it though.
(A more complete way to say this is that Firecracker is the engine built to run AWS Lambda and AWS Fargate).
It has notable adoption in the agent sandbox space where this type of vulnerability is especially volatile.
> The target was Firecracker v1.16.1 on x86-64, with host kernel 7.0.0-1011-aws.
Firecracker v1.17.0 was released 10 September, so the version is ancient.
2 replies →
Fly uses it too afaik
Basically everyone in cloud-land uses it at this point.
1 reply →
[dead]
Not affected https://aws.amazon.com/security/security-bulletins/2026-137-...
The article is light on details, it is LLM slop.