Hacker Reports PS5 Vulnerability Using Generative AI, Receives $50,000 Reward
October 29, 2026 · 2 min read
A hacker discovered a vulnerability in the PS5 virtual machine monitor using generative AI and subsequently reported it to Sony through HackerOne, receiving a reward of $50,000. The vulnerability, affecting firmware versions 13.60 to 14.00, can be exploited to execute kernel code, enabling Linux to run on consoles that do not originally support it.
The issue was reportedly known to Google security engineer Andy Nguyen, also known as theflow0, who had discovered the same problem and was preparing to withhold public disclosure to further support Linux on PS5 and PS5 Pro.
Initially, the hacker, known as Jordy, had an agreement with theflow0 not to report the vulnerability. However, after another researcher also identified the same issue using generative AI, Jordy decided to report it, especially considering the closing window for claiming the reward. Personal pressures, including a seriously ill mother, also influenced his decision to pursue the reward.
Some gamers had hoped to keep the vulnerability under wraps until the release of Grand Theft Auto 6 on November 19, allowing them to update to the necessary firmware for the game while maintaining the capability to dual boot Linux. By reporting the issue early, Sony now has the opportunity to patch the vulnerability before the game's launch, which may force users to choose between keeping Linux functionality offline or upgrading their systems.
The rise of generative AI is making it increasingly difficult for the homebrew community to maintain the practice of keeping vulnerabilities secret, as multiple discoveries of console vulnerabilities occur more rapidly. The vulnerability has now been reported to Sony, and Jordy has received the $50,000 reward.