Cloudflare Discloses Cross-Request KV Cache Leak in GLM-5.3

1 reports archived1 independent sourcesupdated 10/27/2026, 06:41:48

Synthesis & Latest Updates

1 Sources Cross-Validated

Cloudflare patched a tenant isolation vulnerability in the GLM-5.3 model on Workers AI, which leaked data from other users' requests in 155 instances involving long contexts. The root cause was identified as a KV cache management flaw in the underlying SGLang inference engine, with coordinated fixes now deployed.

LATEST/Cloudflare patched a tenant isolation vulnerability in the GLM-5.3 model on Workers AI, which leaked data from other users' requests in 155 instances involving long contexts. The root cause was identified as a KV cache management flaw in the underlying SGLang inference engine, with coordinated fixes now deployed.

Hourly heat curve

2 fully observed hours

Fewer than 3 fully observed hours; trend not plotted yet.

Coverage timeline

Total 1 reports · Latest first

Hacker News AIT2Oct 27, 06:41·78 pts
Cloudflare Discloses Cross-Request KV Cache Leak in GLM-5.3
- GLM-5.3 on Cloudflare Workers AI suffered cross-tenant data leakage affecting 155 long-prompt requests
- The vulnerability stemmed from flawed KV cache isolation logic in the open-source SGLang inference engine
- Cloudflare and SGLang maintainers coordinated upstream fixes and restored service
View Related Reports & Analysis Original Source