Hacker finds PS5 hypervisor bug with AI, awarded $50,000 bounty

Jailbreaking community criticises researcher for breaking delay promise and relying on large language models

By LineZotpaper AI staff

Published27 October 2026

Read Time2 min

A security researcher using an artificial intelligence language model discovered a hypervisor vulnerability in Sony's PlayStation 5 that allowed Linux to be loaded on the console. The researcher, who goes by Jordy on social media, reported the flaw to Sony and received a $50,000 bug bounty. The disclosure has drawn strong criticism from members of the jailbreaking community.

According to a report by IGN, Jordy shared news of the award on X, formerly Twitter, drawing significant backlash. The criticism stems partly from an agreement Jordy made with prominent PS5 researcher Andy Nguyen, known as flow0, to delay reporting the bug until after the launch of Grand Theft Auto VI. Jordy told IGN that they decided to report the vulnerability early after other researchers also using AI found the same bug, risking the loss of the bounty if someone else reported it first. "I decided I would report it," Jordy said. "If I and another person can find it with LLM, so can someone else."

The bug allowed Linux installation on PS5 models running firmware versions 3.00 to 13.60. Sony released firmware version 14.20 on October 21, 2026, which patched the vulnerability. This means users running Linux on their PS5 would have to choose between that and playing new games like GTA VI, which typically require the latest firmware.

Andy Nguyen announced on X that they are stepping away from PS5 Linux work. "The scene used to be a group of highly talented researchers, but now it is just a bunch of noobs using LLMs and writing hacks they don't even understand," Nguyen posted.

Other users on X also criticised Jordy. A user named Gille replied, "50k in bank but 0 friends left. Worth it?" Another user, Matthew Cramer, said the issue was not the money but that "the whole point of exploiting PS5 is freedom, ownership, and control. Sony goes against everything we stand for!"

The controversy comes amid broader tensions in the PS5 jailbreaking community, especially after Sony announced it will end physical game disc production by January 2028, a decision that has drawn pushback.

RSS

The Daily Edition

The front page in your inbox each weekday morning: the lead, the picks, and why each one earned its place.

Analysis

Why This Matters

The vulnerability allowed users to install Linux on their PS5, expanding the console's functionality; its patch restricts that ability.
The use of AI to discover the bug highlights a growing trend in cybersecurity research and raises questions about the role of automation in bug bounty programs.
The incident has deepened divides within the console hacking community between traditional researchers and those using AI tools.

Background

PlayStation 5 has long been a target for jailbreakers seeking to run custom software. Sony runs a bug bounty program that rewards researchers for responsibly reporting vulnerabilities. The company recently faced backlash over its decision to end physical game disc production in 2028. The PS5 Linux loader project requires specific firmware versions to work, and Sony's latest update has patched the vulnerability that made it possible.

Key Perspectives

Jordy (the researcher): says they used an AI large language model to find the hypervisor bug, and reported it early because other AI users could find it too; Jordy stated they risked losing the $50,000 bounty if someone else reported first.
Andy Nguyen (flow0): says they had found the same bug months earlier and planned to delay disclosure until after GTA VI's release; Nguyen criticised the current scene for relying on AI and announced they are stepping away from PS5 Linux work.
Gille (X user): questioned whether the bounty was worth losing friends.
Darth Riker (X user): accused Jordy of not finding the bug themselves and of being no different from scammers.
Matthew Cramer (X user): criticised the money grab and said the point of exploiting PS5 is freedom and control.

What to Watch

Whether Sony's patch permanently blocks Linux installation on PS5 or if other vulnerabilities will be found.
How the PS5 jailbreaking community evolves as AI tools become more common in vulnerability research.
The potential for bug bounty programs to be overwhelmed by AI-generated submissions, as seen with Google's decision to freeze its program until 2027.

Sources

Hacker awarded $50k bounty for reporting bug to Sony that allowed PS5 Linux exploit · Tom's Hardware

Checked

12 claims in this story checked against 1 source: 11 supported.

Show each claim

SupportedA researcher used an AI language model to find a hypervisor vulnerability in the PS5.Latest from Tom's Hardware: “A hacker used an AI LLM to find a hypervisor bug”
SupportedJordy received a $50,000 bounty for reporting the bug to Sony.Latest from Tom's Hardware: “subsequently reported it to Sony, and received a $50,000 bug bounty.”
SupportedThe vulnerability allowed Linux to be loaded on PS5 consoles running firmware 3.00 to 13.60.Latest from Tom's Hardware: “The ps5-linux-loader GitHub project requires a PS5 Phat, Slim, or Pro running firmware version 3.00 to 13.60 to work as intended.”
Partly supportedJordy agreed with Andy Nguyen, identified as flow0, to delay reporting the bug until after GTA VI launches; the story describes Nguyen as prominent.Latest from Tom's Hardware: “Jordy told the publication that they agreed with Nguyen to delay the bug report, with the latter asking to only do so after GTA 6 has come out.”
SupportedJordy reported the bug early because other researchers using generative AI had also found it, creating a risk of losing the bounty if someone else reported it.Latest from Tom's Hardware: “the former admitted to doing it anyway as other researchers using generative AI also found the bug, with Jordy risking losing the $50,000 bounty if somebody else reports the exploit.”
SupportedJordy told IGN, “I decided I would report it.”Latest from Tom's Hardware: ““I decided I would report it,” Jordy told IGN.”
SupportedJordy told IGN, “If I and another person can find it with LLM, so can someone else.”Latest from Tom's Hardware: ““If I and another person can find it with LLM, so can someone else.””
SupportedSony released firmware version 14.20 on October 21, 2026, and it patched the vulnerability.Latest from Tom's Hardware: “it released firmware version 14.20 on Oct. 21, 2026, which patched the flaw.”
SupportedThe update means PS5 users experimenting with Linux may have to choose between Linux and playing GTA VI on launch day.Latest from Tom's Hardware: “the latest update means that users who are experimenting with running Linux on their PlayStation 5 would either have to pick between that and playing GTA VI on launch date.”
SupportedNguyen posted, “The scene used to be a group of highly talented researchers, but now it is just a bunch of noobs using LLMs and writing hacks they don't even understand.”Latest from Tom's Hardware: ““The scene used to be a group of highly talented researchers, but now it is just a bunch of noobs using LLMs and writing hacks they don’t even understand.””
SupportedGille replied, “50k in bank but 0 friends left. Worth it?”Latest from Tom's Hardware: “One user called Gille replied to their post, saying, “50k in bank but 0 friends left. Worth it?””
SupportedMatthew Cramer said, “the whole point of exploiting PS5 is freedom, ownership, and control. Sony goes against everything we stand for!”Latest from Tom's Hardware: ““The worst thing is not the money grab, it’s the fact that the whole point of exploiting PS5 is freedom, ownership, and control. Sony goes against everything we stand for!”