Cloudflare discloses cross-tenant KV cache leak on Workers AI
10/27/2026 — 10/27, 17:23·3 sources (all)·3 reports (all)
Key takeaways
- Cloudflare disclosed a cross-tenant isolation incident on Workers AI: between August 27 and September 9, 2026, the GLM-5.3 model sent data f…
Latest turnCloudflare has disclosed a tenant-isolation incident on Workers AI: between August 27 and September 9, the GLM-5.3 model (@cf/zai-org/glm-5.3) mixed other customers' request data into responses 155 times, all on very long-context prompts, according to a report by OSChina. Security researcher Gadi Evron of Knostic reported the cross-request KV cache exposure through HackerOne on September 8.
Related AI tools
- Heat index
- 190
- All sources
- 3
- All reports
- 3
- First seen
- 14 hours ago
Reports on this story headlines open the original
Cloudflare has disclosed a tenant-isolation incident on Workers AI: between August 27 and September 9, the GLM-5.3 model (@cf/zai-org/glm-5.3) mixed other customers' request data into responses 155 times, all on very long-context prompts, according to a report by OSChina. Security researcher Gadi Evron of Knostic reported the cross-request KV cache exposure through HackerOne on September 8.
开源中国AI score 66A Hacker News discussion flags a cross-request KV cache exposure issue in the GLM-5.3 Workers AI model, with the thread drawing 57 points and 155 responses. The reported flaw points to a potential cache-isolation risk in model serving, though the linked discussion provides limited technical detail.
Hacker News · AIAI score 61
SGLang released a security update to improve request isolation after Cloudflare notified it of cross-request KV cache exposure in its GLM-5.3 deployment on Workers AI on September 9, 2026. The two teams fixed the request-rejection path and strengthened cache-lifetime handling in disaggregated serving.
LMSYS / SGLangFirst-partyAI score 50
Other stories people are talking about
- Heat index 68Developer Shares Free Cloudflare Workers AI LLM Chat and Translation Setup1 sources
- Heat index 47Cloudflare launches public beta of Auto Router in AI Gateway1 sources
- Heat index 2059Anthropic files S-1 for Nasdaq listing as Broadcom arranges $63B chip financing35 sources
- Heat index 1691SurgeAnthropic files for IPO at a possible $2 trillion valuation19 sources
- Heat index 1532RisingOpenAI launches GPT-6.1 Terra with halved API pricing for computer use21 sources
How is heat calculated?About the methodHide
Heat counts how many independent sources covered a story in the last 48 hours: one source counts once no matter how many posts it published, decaying with a 24-hour half-life. What ranks first is what many people are talking about.
This page aggregates public feeds. Headlines and summaries are machine-organized and remain the property of the original authors; verify important facts at the source. If you believe a headline or summary infringes your rights, email the contact address in the footer with the page URL and basis of your claim, and we will remove or replace it after review.
- Surge
- Discussion rising fast
- New
- First report within 6 hours
- Rising
- Still gathering discussion