Cloudflare WAF Faces Adaptive AI Probes

The important result is not that individual payloads passed, but that adaptive mutation exposed gaps static security tests can miss.

• –XSS, SQLi, LFI, and Log4j coverage was nearly complete.
• –Command injection and SSRF accounted for 48 of 49 findings.
• –A trailing-dot cloud metadata address triggered a redirect instead of a WAF block, creating a lead for investigation—not proof of exploitation.
• –Human triage remains essential because a request passing the WAF is not automatically a vulnerability.
• –Repeating the test with a second model version surfaced similar issues, suggesting the approach is reproducible.