vibehacker
News
Cloudflare Blog ·

Cloudflare: an SGLang cache bug let GLM-5.3 on Workers AI leak other customers' data in 155 responses

Disclosed Oct 26, prompts over 681,280 tokens to @cf/zai-org/glm-5.3 between Aug 27 and Sep 9 hit an SGLang disaggregated prefill/decode bug that left stale KV cache pages in place, so replies could include text from other tenants' requests. Cloudflare says customers need do nothing, but anyone self-hosting SGLang in disaggregated mode should upgrade to v0.5.22 or later.

More news

View all

Spotted something we missed? Start a thread.