{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Cloudflare Workers AI's GLM-5.3 returned other customers' data in 155 responses after an SGLang KV cache bug; SGLang operators should update to v0.5.22 · updates",
  "home_page_url": "https://pwn.watch/i/cloudflare-workers-ai-glm-5-3-sglang-kv-cache-cross-tenant-leak",
  "feed_url": "https://pwn.watch/i/cloudflare-workers-ai-glm-5-3-sglang-kv-cache-cross-tenant-leak/feed.json",
  "description": "Between Aug 27 and Sep 9 2026, Cloudflare's GLM-5.3 model on Workers AI (@cf/zai-org/glm-5.3) sometimes answered very long prompts with data from other customers' recent requests to the same model, Cloudflare disclosed on Oct 26. 155 responses were affected, all to prompts longer than 681,280 tokens. Two issues combined: Cloudflare launched the model with a 1,048,576-token context window but a prefill KV cache pool that held only 681,280 tokens, and SGLang, the open-source inference engine it uses, mishandled over-length requests in disaggregated prefill/decode mode. Instead of returning an error, it swapped the prompt for a one-token placeholder, transferred one KV page, and let the decode node attend over stale cache pages still holding earlier users' prompts and partial generations, returning HTTP 200. Researcher Gadi Evron of Knostic reported it via HackerOne on Sep 8; Cloudflare took the model offline on Sep 9, fixed its configuration and engine, and restored it the same day. It found no evidence of deliberate exploitation and says no other Workers AI model was affected, so Cloudflare customers have nothing to do. Anyone running SGLang in disaggregated prefill/decode mode should update to v0.5.22 or later (or backport #36988 and #38935) and check that each node's KV pool is at least as large as the context length.",
  "language": "en",
  "_pwn": {
    "slug": "cloudflare-workers-ai-glm-5-3-sglang-kv-cache-cross-tenant-leak",
    "severity": "high",
    "status": "live",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/cloudflare-workers-ai-glm-5-3-sglang-kv-cache-cross-tenant-leak/feed.xml",
    "llms": "https://pwn.watch/i/cloudflare-workers-ai-glm-5-3-sglang-kv-cache-cross-tenant-leak/llms.txt",
    "json": "https://pwn.watch/i/cloudflare-workers-ai-glm-5-3-sglang-kv-cache-cross-tenant-leak.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/cloudflare-workers-ai-glm-5-3-sglang-kv-cache-cross-tenant-leak#2026-10-26-4bd7c2f2",
      "url": "https://pwn.watch/i/cloudflare-workers-ai-glm-5-3-sglang-kv-cache-cross-tenant-leak#2026-10-26-4bd7c2f2",
      "title": "Cloudflare Workers AI's GLM-5.3 returned other customers' data in 155 responses after an SGLang KV cache bug; SGLang operators should update to v0.5.22: Cloudflare publishes its report as a coordinated disclosure with the researcher and the SGLang maintainers, recommending all SGLang operators update to v0.5.22 or later.",
      "content_text": "Cloudflare Workers AI's GLM-5.3 returned other customers' data in 155 responses after an SGLang KV cache bug; SGLang operators should update to v0.5.22: Cloudflare publishes its report as a coordinated disclosure with the researcher and the SGLang maintainers, recommending all SGLang operators update to v0.5.22 or later.\n\nSource: https://blog.cloudflare.com/kv-cache-exposure-remediation/",
      "date_published": "2026-10-26T00:00:00.000Z",
      "external_url": "https://blog.cloudflare.com/kv-cache-exposure-remediation/",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/cloudflare-workers-ai-glm-5-3-sglang-kv-cache-cross-tenant-leak#2026-10-19-aa8aa5af",
      "url": "https://pwn.watch/i/cloudflare-workers-ai-glm-5-3-sglang-kv-cache-cross-tenant-leak#2026-10-19-aa8aa5af",
      "title": "Cloudflare Workers AI's GLM-5.3 returned other customers' data in 155 responses after an SGLang KV cache bug; SGLang operators should update to v0.5.22: SGLang v0.5.22 is released, completing the upstream fixes (the core admission fixes #36988 and #38935 shipped in v0.5.20 and v0.5.21).",
      "content_text": "Cloudflare Workers AI's GLM-5.3 returned other customers' data in 155 responses after an SGLang KV cache bug; SGLang operators should update to v0.5.22: SGLang v0.5.22 is released, completing the upstream fixes (the core admission fixes #36988 and #38935 shipped in v0.5.20 and v0.5.21).\n\nSource: https://github.com/sgl-project/sglang/releases/tag/v0.5.22",
      "date_published": "2026-10-19T00:00:00.000Z",
      "external_url": "https://github.com/sgl-project/sglang/releases/tag/v0.5.22",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/cloudflare-workers-ai-glm-5-3-sglang-kv-cache-cross-tenant-leak#2026-09-09-b274a355",
      "url": "https://pwn.watch/i/cloudflare-workers-ai-glm-5-3-sglang-kv-cache-cross-tenant-leak#2026-09-09-b274a355",
      "title": "Cloudflare Workers AI's GLM-5.3 returned other customers' data in 155 responses after an SGLang KV cache bug; SGLang operators should update to v0.5.22: Cloudflare reproduces the leak, sets the model to private, rolls out a corrected configuration and a patched engine, and restores the model to public at 19:40 UTC.",
      "content_text": "Cloudflare Workers AI's GLM-5.3 returned other customers' data in 155 responses after an SGLang KV cache bug; SGLang operators should update to v0.5.22: Cloudflare reproduces the leak, sets the model to private, rolls out a corrected configuration and a patched engine, and restores the model to public at 19:40 UTC.\n\nSource: https://blog.cloudflare.com/kv-cache-exposure-remediation/",
      "date_published": "2026-09-09T00:00:00.000Z",
      "external_url": "https://blog.cloudflare.com/kv-cache-exposure-remediation/",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/cloudflare-workers-ai-glm-5-3-sglang-kv-cache-cross-tenant-leak#2026-09-08-f5ccc27f",
      "url": "https://pwn.watch/i/cloudflare-workers-ai-glm-5-3-sglang-kv-cache-cross-tenant-leak#2026-09-08-f5ccc27f",
      "title": "Cloudflare Workers AI's GLM-5.3 returned other customers' data in 155 responses after an SGLang KV cache bug; SGLang operators should update to v0.5.22: Gadi Evron of Knostic reports via HackerOne that very long prompts to GLM-5.3 sometimes return text from other users' sessions.",
      "content_text": "Cloudflare Workers AI's GLM-5.3 returned other customers' data in 155 responses after an SGLang KV cache bug; SGLang operators should update to v0.5.22: Gadi Evron of Knostic reports via HackerOne that very long prompts to GLM-5.3 sometimes return text from other users' sessions.\n\nSource: https://blog.cloudflare.com/kv-cache-exposure-remediation/",
      "date_published": "2026-09-08T00:00:00.000Z",
      "external_url": "https://blog.cloudflare.com/kv-cache-exposure-remediation/",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/cloudflare-workers-ai-glm-5-3-sglang-kv-cache-cross-tenant-leak#2026-08-27-ba24548f",
      "url": "https://pwn.watch/i/cloudflare-workers-ai-glm-5-3-sglang-kv-cache-cross-tenant-leak#2026-08-27-ba24548f",
      "title": "Cloudflare Workers AI's GLM-5.3 returned other customers' data in 155 responses after an SGLang KV cache bug; SGLang operators should update to v0.5.22: GLM-5.3 launches on Workers AI with a prefill KV pool smaller than its context window; the exposure is present from launch.",
      "content_text": "Cloudflare Workers AI's GLM-5.3 returned other customers' data in 155 responses after an SGLang KV cache bug; SGLang operators should update to v0.5.22: GLM-5.3 launches on Workers AI with a prefill KV pool smaller than its context window; the exposure is present from launch.\n\nSource: https://blog.cloudflare.com/kv-cache-exposure-remediation/",
      "date_published": "2026-08-27T00:00:00.000Z",
      "external_url": "https://blog.cloudflare.com/kv-cache-exposure-remediation/",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/cloudflare-workers-ai-glm-5-3-sglang-kv-cache-cross-tenant-leak#2026-07-06-6325cacc",
      "url": "https://pwn.watch/i/cloudflare-workers-ai-glm-5-3-sglang-kv-cache-cross-tenant-leak#2026-07-06-6325cacc",
      "title": "Cloudflare Workers AI's GLM-5.3 returned other customers' data in 155 responses after an SGLang KV cache bug; SGLang operators should update to v0.5.22: The same SGLang engine bug is reported by another user as SGLang issue #30233.",
      "content_text": "Cloudflare Workers AI's GLM-5.3 returned other customers' data in 155 responses after an SGLang KV cache bug; SGLang operators should update to v0.5.22: The same SGLang engine bug is reported by another user as SGLang issue #30233.\n\nSource: https://github.com/sgl-project/sglang/issues/30233",
      "date_published": "2026-07-06T00:00:00.000Z",
      "external_url": "https://github.com/sgl-project/sglang/issues/30233",
      "tags": [
        "high"
      ]
    }
  ]
}