Workers AI fixes GLM-5.3 cache exposure

// 1h agoSECURITY INCIDENT

Workers AI fixes GLM-5.3 cache exposure

Cloudflare disclosed that 155 GLM-5.3 responses on Workers AI contained data from other customers after a context-length mismatch triggered an SGLang disaggregated-serving bug. Cloudflare took the model offline, patched its deployment, and upstreamed fixes; it found no evidence of deliberate exploitation.

// ANALYSIS

This was an inference-infrastructure isolation failure, not a model flaw: a known KV-capacity mismatch met an engine bug that failed to stop rejected requests before handoff.

–Prompts above 681,280 tokens could access stale KV pages from earlier sessions
–Cloudflare’s testing checked status codes and performance, but not output isolation or coherence
–Operators should compare actual KV-pool capacity with configured context length before every deployment change
–SGLang users should upgrade to v0.5.22 or backport the admission, lifecycle, transfer, and corruption-detection fixes
–Page ownership checks and formal verification may provide stronger protection than configuration validation alone

// TAGS

cloudflare-workers-aisglangsecurityinferencemlopscloudopen-source

DISCOVERED

1h ago

2026-10-26

PUBLISHED

1h ago

2026-10-26

RELEVANCE

9/ 10

AUTHOR

Cloudflare

// KEEP READING

More AI developer news from the feed

EXPLORE FULL FEED

UPDATE1h ago

Socket Threat Intel adds campaign summaries

Socket Threat Intel now connects repository scans with Socket Firewall activity to show which malware campaigns were blocked or detected across an organization. The update gives security teams a faster view of campaign exposure than reviewing package alerts and network events separately.

BENCHMARK1h ago

Code2Video-AA Crowns Claude Opus 5.5

Artificial Analysis launched Code2Video-AA, an independent benchmark testing 27 models across 114 code-generated motion-design briefs rendered with HyperFrames. Claude Opus 5.5 leads at 1536 Elo, ahead of GPT-6 Astra at 1427 and Gemini 4 Argon at 1259.

LAUNCH1h ago

Mint Modeler Opens Early Access

Mint Modeler is an early-stage AI 3D creation tool from Mint that turns prompts or reference images into downloadable 3D assets. The early-access signup signals a push toward faster, browser-based 3D prototyping for developers and creators.