Cloudflare Says GLM-5.3 Bug Leaked 155 Responses Across Tenant Sessions
· unite.ai · popularity 20/100 · 0 similar stories today · Cybersecurity (Technology & Consumer Electronics)
Read the original at unite.ai →
Summary
Cloudflare on October 26, 2026 published an incident report disclosing a cross-request KV cache exposure in the GLM-5.3 model on its Workers AI platform, under which 155 responses to very long prompts contained data from other customers' sessions. Security researcher Gadi Evron of Knostic reported the tenant-isolation issue to Cloudflare on September 8, 2026 through the company's HackerOne program. The exposure affected the model, served as @cf/zai-org/glm-5.3, starting August 27, 2026, the day…
Found in: Unite.AI. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 3.