# Cloudflare discloses cross-customer data exposure in 155 AI responses

_Published Monday, October 26, 2026 at 7:25 PM EDT · Security, AI · Latest · Tier 2 — Notable_

![Cloudflare discloses cross-customer data exposure in 155 AI responses — Primary](https://blog.cloudflare.com/_emdash/api/media/file/01M5X2YJT16K16BFFJGEMCAXRS.01M5X2YM62P3YQRBGRP96FS4P6.png)

Cloudflare disclosed that 155 responses from its GLM-5.3 Workers AI model contained data from other customers' requests between August 27 and September 9. The company restored the model on September 9 after correcting its configuration and patching the inference engine.

The model accepted a 1,048,576-token context window, but memory used to store processed prompts held only 681,280 tokens. A bug in the SGLang engine allowed rejected oversized requests to generate responses using memory left by earlier requests.

Cloudflare says every affected response followed a prompt longer than 681,280 tokens. It found no evidence of deliberate exploitation and says no other Workers AI model was affected. The company recommends that other SGLang operators update to v0.5.22 or later.

## Sources

- [blog.cloudflare.com](https://blog.cloudflare.com/kv-cache-exposure-remediation/)

---
Canonical: https://techandbusiness.org/newswire/XshcnZAtf5sYjXzIYYinqp
Published: 2026-10-26T23:25:29.512Z
Story chronology: 2026-10-26T22:41:48.000Z
Retrieved: 2026-10-27T02:07:07.653Z
Publisher: Tech & Business (techandbusiness.org)