Illustration, AI-generated from the story text. Tap a panel to enlarge.

Cloudflare discloses cross-customer data exposure in Workers AI

Cloudflare disclosed a serving-system bug that exposed data from other customers' earlier requests in 155 GLM-5.3 responses between August 27th and September 9th. The affected requests exceeded 681,280 input tokens. Cloudflare says it notified affected customers and restored isolation after receiving the report.

The failure involved isolation of the KV cache, which stores intermediate model calculations. Cloudflare reports no evidence of deliberate exploitation and says other models were unaffected. Long-context buyers need isolation tests for the serving infrastructure as well as tests of model behavior. SourcesA

Sources

• ACloudflare discloses cross-customer data exposure in Workers AIblog.cloudflare.com

This story ran in the Morning Brief of October 27th 2026.