Cloudflare Patches Cross-Tenant Data Leak in Containers

Security researcher Oren Yomtov reported that Cloudflare Containers reused disk blocks without wiping them, allowing new tenants to recover previous tenants' data—including full SQLite files—from 64 KiB blocks; Cloudflare has since patched the flaw.

2026-09-24 ~ 2026-09-25 · 4 related posts

• Researchers exploited Cloudflare Containers flaw to read other tenants' residual disk data — matthew_d_green · 2026-09-24
• Cloudflare fixes cross-tenant data exposure in Containers: deleted disks handed to next tenant unwiped — ziv_ravid · 2026-09-24
• Researchers Find Cloudflare Containers Leak Previous Tenant's Data, Including Full Databases — ziv_ravid · 2026-09-24
• Cloudflare fixes Containers flaw that leaked residual disk data across tenants — TechNadu · 2026-09-25