Cloudflare on October 26, 2026 published an incident report disclosing a cross-request KV cache exposure in the GLM-5.3 model on its Workers AI platform, under which 155 responses to very long prompts contained data from other customers' sessions. Security researcher Gadi Evron of Knostic reported the tenant-isolation issue to Cloudflare on September 8, 2026 through the company's HackerOne program. The exposure affected the model, served as @cf/zai-org/glm-5.3, starting August 27, 2026, the day…
This article has been indexed from Unite.AI
Read the original article:
Cloudflare Says GLM-5.3 Bug Leaked 155 Responses Across Tenant Sessions