Biguan · World Briefing · Tags中文版

Person

Gadi Evron

  1. Cloudflare discloses KV cache isolation flaw in GLM-5.3 on Workers AI; 155 responses contained other users' data

    Cloudflare said in an incident report that from Aug 27 to Sept 9, the GLM-5.3 model hosted on its Workers AI platform had a tenant isolation problem in which a small number of customers received responses containing data from other customers' recent requests to the same model. A total of 155 responses were affected, all for prompts longer than 681,280 tokens. Security researcher Gadi Evron of Knostic reported the issue on Sept 8, the model was restored on Sept 9 after a fix, other models were unaffected, and the company found no evidence of deliberate exploitation.

    Oct 27, 2026 Afternoon