The confirmed and tested vulnerable versions for root are:
v72, v74, v76, v77,v78,v79
They also have a discord (idk if the invite link still works, if it does it should have been turned off... Sigh...):
Supposedly root was achieved by a qualcom chip security exploit that meta has been notified about but seemingly hasn't patched:
https://github.com/zhuowei/cheese/tree/ksma-demo
(The group has been heavily censoring this link and not properly attributing credit to this git user for the exploit)
The group that achieved root access have been vague in how they used this vulnerability(apparently they bricked 3 headsets in the process). The little details they gave seem to lead people on the trail with it being a bug in the gpu driver. They seem to be gatekeeping the exploit and only giving some users access (due to concern of "kids being dumb and bricking their headsets" they want to devwlop a full proof easy method before release). They are insistent on unlocking bootloader for their own os and developing magisk modules before they give explanations on how they did it.
https://github.com/topjohnwu/Magisk/issues/9231
Some users have expressed frustration with the groups negligence in opsec (gloating on reddit, trolling meta support, communicating with a meta employee, communicating to developers on the platform they achieved root so they can prepare for cheating on their games). The community is also showing frustration at the branching out of the project in so many directions rather than releasing how root was accomplished.
The group is attempting to file a lawsuit against meta, HTC, and Bytedance for violating the GPLv2 license and locking down the bootloader.
I am posting this info on the exploit because the opsec is already fucked. I think it is of the utmost urgency for something to come of this exploit and we onboard as many users as possible. Many users have spoken up about just wanting root and not really the operating system.
Here is an example of the group telling the world, this post still remains up with the comments from op as well (op is the discord server owner):
https://old.reddit.com/r/OculusQuest/comments/1ma7a1o/plugged_in_my_dead_quest_3_and_rainbow_leds/