AIR Security

AIR Security reports a controlled demonstration of data leaving Vercel Sandbox through an allowed external service, despite a domain allowlist blocking a direct connection to the researchers’ receiver. The external service made an onward request while processing agent-controlled certificate data. This is an indirect egress finding, not a demonstrated VM escape or an observed rogue-agent incident; AIR says Vercel classified the report as outside its bounty scope because the technique depends on a server Vercel does not operate.