Cloudflare discloses a Workers AI cross-customer leak fixed in September
Cloudflare disclosed on 26 October 2026 that 155 responses from its GLM-5.3 model on Workers AI contained data from other customers' requests. Exposure ran from 27 August to 9 September; this is disclosure of an already-fixed incident.
The company says affected responses followed requests exceeding 681,280 tokens. Insufficient cache capacity and a flaw in how the SGLang engine handled oversized requests allowed content to cross between customers.
Knostic researcher Gadi Evron describes independent checks ruling out simple hallucinations, with names, invoice information and code among the outputs. Cloudflare says it corrected the configuration and engine before restoring service on 9 September and found no other Workers AI model affected. The figure of 155 counts responses, not an established number of victims.