Cloudflare bug leaked 155 GLM responses across customers via oversized-context cache reads
mark_k · x · 2026-10-29
Some Cloudflare AI users received fragments of other customers' conversations in August and September; the issue was fixed September 9 and detailed publicly October 26. The leak affected 155 responses from GLM-5.3 on Workers AI: the model's advertised context window exceeded the memory allocated to process it, and an inference-engine bug let oversized requests read cached data left by earlier users. Cloudflare says no other hosted model was affected and found no evidence of deliberate exploitation — the model wasn't tricked into revealing secrets; the infrastructure failed to keep customer data separate.
More from Infra
- Intel down 23% post-earnings: AI server demand booms while PC business collapses — tengyanAI · 2026-10-30
- Arizona asks residents to limit showers to 30 seconds while AI data centers drink its water — CtrlAltDwayne · 2026-10-30
- Cloudflare developer users grow 10x in 3 years, from 1M to 10M — yihui_indie · 2026-10-30
- By 2028, 'country of geniuses in a datacenter' will be limited only by datacenter count — timshi_ai · 2026-10-30
- 797GB of CPU-side n-gram lookups match 57% more compute on 1B LM training — PangWeiKoh · 2026-10-30
- Redditor jokes about finding racks of idle GPUs at a local data center — Beneficial-Ad-8127 · 2026-10-30