Tech
Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang
Readthrough summary
Cloudflare disclosed that between Aug. 27 and Sept. 9, a tenant-isolation flaw in its GLM-5.3 Workers AI model caused 155 responses to include data from other customers' recent requests. A security researcher from Knostic reported the issue on Sept. 8; Cloudflare fixed it, restored the model Sept. 9 and says no other models were affected.
Summary written by Readthrough from the original article. The full story, with photos and any updates, is at Cloudflare Blog.
