Replit rebuilt its sandbox engine on microVMs and dodged 96% of Linux kernel CVEs
Replit rebuilt its sandbox engine with microVMs
Replit rewrote its sandbox engine from shared-kernel Docker containers to KVM-based microVMs running Cloud Hypervisor, migrating hundreds of millions of projects with no data loss. Each sandbox now gets its own minimal Linux kernel built from tinyconfig, cutting the attack surface. Auditing 6,211 Linux-CNA CVEs from June to November 2026, Replit says it avoided 5,969 (96.1%) through upstream fixes or excluded code, including 676 blocked by configuration alone.
Your coding agent definitely doesn’t need a Nintendo Switch controller.
- ghshephard
Replit intrigues me. Other than Paul Graham talking it up a lot on Twitter - I've never once heard of anyone using it, seen any chatter about it in any or our internal slack forums. Every other AI company I get barraged with- no matter where I go, even antigravity/gemini carbon/argon/models/etc... - which nobody I know uses either - but at least I hear about them a lot.
I wonder what ecosystem replit exists in that seems to completely not overlap with any of the other AI technologies and companies....
- schainks
My read on this is they re-invented the OTP supervision tree, process isolation, hibernation, and actor-to-actor message passing, but had to push the isolation boundary all the way down into Ring -1 (KVM/Cloud Hypervisor) and customized Linux tinyconfig kernels because their "actors" are actively trying to jailbreak the hypervisor.
Is that about right?
- clhodapp
It's only somewhat related to the article, but:
How do people feel about the hardware isolation provided by microVMs versus strong software isolation techniques like gvisor?
Right now, we put a huge amount of stock in "hardware isolation". If that starts falling to agents to any substantial degree, I wonder whether we might end up seeing a transition toward patchable software isolation, similar to the rise of software RAID that occurred a while back.
- curiousgal
This Replit? https://intuitiveexplanations.com/tech/replit/
- pearcoder
MicroVMs are quite popular nowadays due to sandboxing but we need to also keep in mind least privilege principle. Applying that is also tricky.