{"id":"ddf6cd38671b8e65acc068399410cec22dff1e2dc19a40b7dad1c0ede26828a7","title":"Cloudflare details cross-request KV cache exposure in GLM-5.3 and its remediation","argument":"Cloudflare reports that a configuration mismatch and an SGLang bug allowed some GLM-5.3 Workers AI responses to include data from other customers’ requests. The company says the exposure affected 155 responses between August 27 and September 9, 2026, all to prompts longer than 681,280 tokens.\n\nCloudflare explains that the model’s context window exceeded the KV cache pool available on prefill GPUs. When SGLang rejected an over-length prompt, disaggregated prefill/decode processing still passed a placeholder cache to a decode node. The node treated the transfer as complete and could read stale cache pages left by earlier requests.\n\nCloudflare says it expanded the pool, patched the rejection path, and restored the model on September 9, 2026. It also reports testing the changes against the researcher’s reproduction script and its own canary-marker tests. The company recommends operators using disaggregated SGLang compare KV pool size with context length and use a build containing the relevant fixes.\n\nCloudflare says it found no evidence of deliberate exploitation, but this is its account of the investigation. Its longer-term proposal is to check page ownership at read time; the described prototype was disabled after reliability issues. How broadly can such checks work across model architectures without introducing reliability or performance costs?","topicIds":["power-and-infrastructure","institutions-and-trust"],"domain":"infrastructure","claimType":"attributed reading","limits":"The account is Cloudflare's report; this evidence does not independently verify the investigation or its findings. Cloudflare reports a small number of affected customers but does not identify them or detail the contents of every affected response. Cloudflare says its prototype was disabled due to reliability issues and that a production version across model architectures is still in development.","speaker":{"name":"Cloudflare","roleAtSource":"Publisher"},"source":{"title":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","publisher":"Cloudflare Blog","format":"Article","url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","publishedAt":"2026-10-26T22:01:23.889Z","dateBasis":"Date stated by the publisher."},"evidence":[{"text":"Cloudflare says the exposure affected 155 responses, all to prompts longer than 681,280 tokens, between August 27 and September 9, 2026.","excerpt":"In total, 155 responses were affected, all to prompts longer than 681,280 tokens.","url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","relationship":"Source-stated"},{"text":"Cloudflare attributes the exposure to a mismatch between the model context length and KV cache pool, combined with an SGLang rejection-path bug in disaggregated prefill/decode mode.","excerpt":"This specific report of cross-request KV cache exposure was the result of two overlapping issues.","url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","relationship":"Source-stated"},{"text":"Cloudflare says the decode node could read stale cache pages because it treated a transfer of a placeholder prompt's KV cache as complete.","excerpt":"The decode node subsequently generated a response while attending over stale cache pages that still held data from earlier requests.","url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","relationship":"Source-stated"},{"text":"Cloudflare says it expanded the pool, patched the engine, and validated the changes before restoring the model.","excerpt":"We validated both changes against the researcher's reproduction script and our own canary-marker tests before restoring the model.","url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","relationship":"Source-stated"},{"text":"Cloudflare reports finding no evidence of deliberate exploitation.","excerpt":"We found no evidence of deliberate exploitation.","url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","relationship":"Source-stated"},{"text":"Cloudflare says its prototype for checking KV page ownership at read time was disabled after reliability issues, and it is working toward a production version across models.","excerpt":"We tested it on GLM 5.2 in mid-August, but disabled it shortly afterwards due to reliability issues.","url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","relationship":"Source-stated"}],"sourceMedia":{"status":"found","sourceUrl":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","checkedAt":"2026-10-29T16:34:35.095Z","items":[{"type":"image","url":"https://blog.cloudflare.com/_image?href=https%3A%2F%2Fblog.cloudflare.com%2F_emdash%2Fapi%2Fmedia%2Ffile%2F01M5X2P2KSNBX6J13E3B4219PW.png&w=1280&h=720&f=webp&fit=cover&position=center","sourceUrl":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","attribution":"Cloudflare Blog","basis":"publisher-embed","availability":"verified","verifiedAt":"2026-10-29T16:34:35.669Z"}],"note":"Media declared by the original publisher; availability checked separately from the editorial reading."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"How broadly can KV page-ownership checks work across model architectures without introducing reliability or performance costs?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"Cloudflare details cross-request KV cache exposure in GLM-5.3 and its remediation","summary":"Cloudflare reports that a configuration mismatch and an SGLang bug allowed some GLM-5.3 Workers AI responses to include data from other customers’ requests. The company says the exposure affected 155 responses between August 27 and September 9, 2026, all to prompts longer than 681,280 tokens.\n\nCloudflare explains that the model’s context window exceeded the KV cache pool available on prefill GPUs. When SGLang rejected an over-length prompt, disaggregated prefill/decode processing still passed a placeholder cache to a decode node. The node treated the transfer as complete and could read stale cache pages left by earlier requests.\n\nCloudflare says it expanded the pool, patched the rejection path, and restored the model on September 9, 2026. It also reports testing the changes against the researcher’s reproduction script and its own canary-marker tests. The company recommends operators using disaggregated SGLang compare KV pool size with context length and use a build containing the relevant fixes.\n\nCloudflare says it found no evidence of deliberate exploitation, but this is its account of the investigation. Its longer-term proposal is to check page ownership at read time; the described prototype was disabled after reliability issues. How broadly can such checks work across model architectures without introducing reliability or performance costs?","question":"How broadly can KV page-ownership checks work across model architectures without introducing reliability or performance costs?","claims":[{"text":"Cloudflare says the exposure affected 155 responses, all to prompts longer than 681,280 tokens, between August 27 and September 9, 2026.","excerpt":"In total, 155 responses were affected, all to prompts longer than 681,280 tokens.","support":"source-stated"},{"text":"Cloudflare attributes the exposure to a mismatch between the model context length and KV cache pool, combined with an SGLang rejection-path bug in disaggregated prefill/decode mode.","excerpt":"This specific report of cross-request KV cache exposure was the result of two overlapping issues.","support":"source-stated"},{"text":"Cloudflare says the decode node could read stale cache pages because it treated a transfer of a placeholder prompt's KV cache as complete.","excerpt":"The decode node subsequently generated a response while attending over stale cache pages that still held data from earlier requests.","support":"source-stated"},{"text":"Cloudflare says it expanded the pool, patched the engine, and validated the changes before restoring the model.","excerpt":"We validated both changes against the researcher's reproduction script and our own canary-marker tests before restoring the model.","support":"source-stated"},{"text":"Cloudflare reports finding no evidence of deliberate exploitation.","excerpt":"We found no evidence of deliberate exploitation.","support":"source-stated"},{"text":"Cloudflare says its prototype for checking KV page ownership at read time was disabled after reliability issues, and it is working toward a production version across models.","excerpt":"We tested it on GLM 5.2 in mid-August, but disabled it shortly afterwards due to reliability issues.","support":"source-stated"}],"limitations":["The account is Cloudflare's report; this evidence does not independently verify the investigation or its findings.","Cloudflare reports a small number of affected customers but does not identify them or detail the contents of every affected response.","Cloudflare says its prototype was disabled due to reliability issues and that a production version across model architectures is still in development."],"mediaId":"e77549dba84aa9c32f2e4139e6b5e0ef39ce118d94ae16269a7ade40275b9850","correctionReason":null,"id":"ddf6cd38671b8e65acc068399410cec22dff1e2dc19a40b7dad1c0ede26828a7","publicationId":"efb8f4af-7335-44d1-8890-758a88fd837f","version":1,"sourceUrl":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","sourceTitle":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","publisher":"Cloudflare","publishedAt":"2026-10-26T22:01:23.889Z","originalPublished":{"value":"2026-10-26T22:01:23.889Z","precision":"instant","basis":"publisher_page"},"firstObservedAt":"2026-10-26T22:11:02.530Z","createdAt":"2026-11-06T02:02:36.928Z","historical":true,"entityIds":["cloudflare"],"topicIds":["power-and-infrastructure","institutions-and-trust"],"media":[{"id":"e77549dba84aa9c32f2e4139e6b5e0ef39ce118d94ae16269a7ade40275b9850","kind":"article","url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","sourceUrl":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-10-29T16:34:35.669Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."},{"id":"6d5c37696693d0d91223bf0e070d56bae836f4d50f231c2cd978b2ea8bce4014","kind":"image","url":"https://blog.cloudflare.com/_image?href=https%3A%2F%2Fblog.cloudflare.com%2F_emdash%2Fapi%2Fmedia%2Ffile%2F01M5X2P2KSNBX6J13E3B4219PW.png&w=1280&h=720&f=webp&fit=cover&position=center","sourceUrl":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","label":"View source image","provenance":"publisher_page","verification":{"status":"verified","checkedAt":"2026-10-29T16:34:35.669Z","method":"publisher_association_and_head","contentType":"image/webp","cacheUntil":1793291675669},"recommendationReason":"Observed on the acquired publisher source; availability checked."}],"sourceMedia":{"status":"found","sourceUrl":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","checkedAt":"2026-10-29T16:34:35.095Z","items":[{"type":"image","url":"https://blog.cloudflare.com/_image?href=https%3A%2F%2Fblog.cloudflare.com%2F_emdash%2Fapi%2Fmedia%2Ffile%2F01M5X2P2KSNBX6J13E3B4219PW.png&w=1280&h=720&f=webp&fit=cover&position=center","sourceUrl":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","attribution":"Cloudflare Blog","basis":"publisher-embed","availability":"verified","verifiedAt":"2026-10-29T16:34:35.669Z"}],"note":"Media declared by the original publisher; availability checked separately from the editorial reading."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v5","mediaId":"e77549dba84aa9c32f2e4139e6b5e0ef39ce118d94ae16269a7ade40275b9850","confidence":0.97,"provider":"typesafe","model":"jev-1.13.0","inputHash":"cb2d4f255ed81fb1433d14512511ac9f5d27c8150c23d67559d6dc96ce1ba6c2","decidedAt":"2026-10-29T16:34:38.917Z"},"provenance":{"textHash":"e6a3129bcac48b1dfcd4a23991dc558440b40a73950cabaa95789f96b0fb4700","observationId":"3fd813689f55a0aa8fd8a864e2b16004c5298e7b93934b9e0dc89fb9364288ac","retrievedAt":"2026-10-29T16:34:35.095Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"ae8feda7-782a-4439-8761-4834fa3e362d"},"reviewer":{"model":"gpt-6-luna","runId":"ceb19ad4-fe8e-4616-8641-e1b5ae858523"}},"audit":{"status":"passed","reviewedAt":"2026-11-06T02:02:36.928Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[],"authorRole":"article-author","hosts":[],"status":"missing","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Cloudflare Blog","url":null,"kind":"unknown","actorId":null},"role":"publisher","scope":{"kind":"publication","locator":null},"literalCredit":"Cloudflare Blog","status":"stated","provenance":{"basis":"article-publisher","sourceUrl":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","locator":"document/html[1]/head[0]/script[56]@12137.publisher"},"assertionId":"4a0aa2ee66a80d735dd322ac0f44c3aa0ae1b030fc02e6d0ea43edddbfceea4b:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-10-29T16:34:35.095Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"4a0aa2ee66a80d735dd322ac0f44c3aa0ae1b030fc02e6d0ea43edddbfceea4b","sourceUrl":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","contentSha256":"0ef6cee4c2b8aaeef2c72b782091b2a4f70a22bb50e76881fe64d45ab361c13a","textHash":"e6a3129bcac48b1dfcd4a23991dc558440b40a73950cabaa95789f96b0fb4700","observedAt":"2026-10-29T16:34:35.095Z"}}],"participationCoverage":{"total":1,"returned":1,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":{"name":"Cloudflare Blog","url":null},"sourceUrl":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","snapshotId":"4a0aa2ee66a80d735dd322ac0f44c3aa0ae1b030fc02e6d0ea43edddbfceea4b","contentSha256":"0ef6cee4c2b8aaeef2c72b782091b2a4f70a22bb50e76881fe64d45ab361c13a","textHash":"e6a3129bcac48b1dfcd4a23991dc558440b40a73950cabaa95789f96b0fb4700","observedAt":"2026-10-29T16:34:35.095Z","basis":"publisher-page-metadata","sourceLinks":68,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/ddf6cd38671b8e65acc068399410cec22dff1e2dc19a40b7dad1c0ede26828a7/source"}},"canonicalUrl":"https://escapemeridian.com/readings/cloudflare-details-cross-request-kv-cache-exposure-in-glm-5-3-ddf6cd38","formats":{"html":"/readings/cloudflare-details-cross-request-kv-cache-exposure-in-glm-5-3-ddf6cd38","markdown":"/readings/cloudflare-details-cross-request-kv-cache-exposure-in-glm-5-3-ddf6cd38.md","json":"/readings/cloudflare-details-cross-request-kv-cache-exposure-in-glm-5-3-ddf6cd38.json"},"attribution":"Headline and summary by Escape Meridian, prepared by Luna from the attributed source. A source check is not independent confirmation of the source’s claims.","maintainedGuideLinks":[],"readerContext":{"version":"reader-context-v1","attribution":"Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.","terms":[{"id":"term-context-window","name":"Context window","explanation":"How much text a model can take in and consider at one time.","referenceUrl":"https://developers.google.com/machine-learning/glossary#context-window"},{"id":"term-gpu","name":"Graphics processing unit","explanation":"A chip that performs many calculations at once; the main hardware used to train and run AI models.","referenceUrl":"https://en.wikipedia.org/wiki/Graphics_processing_unit"}],"entities":[{"id":"cloudflare","name":"Cloudflare","kind":"organization","context":"Cloudflare provides networking, security and computing services that help run websites and applications.","referenceUrls":["https://blog.cloudflare.com/"],"path":"/entities/cloudflare","json":"/entities/cloudflare.json","markdown":"/entities/cloudflare.md"},{"id":"time","name":"TIME","kind":"organization","context":"TIME is a news magazine publishing reporting on world affairs, business, technology and the workers behind digital services.","referenceUrls":["https://time.com/"],"path":"/entities/time","json":"/entities/time.json","markdown":"/entities/time.md"}]},"researchQuestions":[],"withdrawn":false,"references":{"schemaVersion":1,"target":{"type":"reading","id":"ddf6cd38671b8e65acc068399410cec22dff1e2dc19a40b7dad1c0ede26828a7","revision":"efb8f4af-7335-44d1-8890-758a88fd837f","revisionKind":"publication-id","title":"Cloudflare details cross-request KV cache exposure in GLM-5.3 and its remediation","url":"https://escapemeridian.com/readings/cloudflare-details-cross-request-kv-cache-exposure-in-glm-5-3-ddf6cd38"},"source":{"type":"source","id":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","revision":"e6a3129bcac48b1dfcd4a23991dc558440b40a73950cabaa95789f96b0fb4700","revisionKind":"sha256-source-text","title":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/"},"status":"available","items":[],"next":null,"scope":"Explicit citations in public readings and public file attachments to this reading. Shared topics are not citations. Other artifact types need an explicit reference adapter."},"revisions":[{"id":"ddf6cd38671b8e65acc068399410cec22dff1e2dc19a40b7dad1c0ede26828a7","title":"Cloudflare details cross-request KV cache exposure in GLM-5.3 and its remediation","argument":"Cloudflare reports that a configuration mismatch and an SGLang bug allowed some GLM-5.3 Workers AI responses to include data from other customers’ requests. The company says the exposure affected 155 responses between August 27 and September 9, 2026, all to prompts longer than 681,280 tokens.\n\nCloudflare explains that the model’s context window exceeded the KV cache pool available on prefill GPUs. When SGLang rejected an over-length prompt, disaggregated prefill/decode processing still passed a placeholder cache to a decode node. The node treated the transfer as complete and could read stale cache pages left by earlier requests.\n\nCloudflare says it expanded the pool, patched the rejection path, and restored the model on September 9, 2026. It also reports testing the changes against the researcher’s reproduction script and its own canary-marker tests. The company recommends operators using disaggregated SGLang compare KV pool size with context length and use a build containing the relevant fixes.\n\nCloudflare says it found no evidence of deliberate exploitation, but this is its account of the investigation. Its longer-term proposal is to check page ownership at read time; the described prototype was disabled after reliability issues. How broadly can such checks work across model architectures without introducing reliability or performance costs?","topicIds":["power-and-infrastructure","institutions-and-trust"],"domain":"infrastructure","claimType":"attributed reading","limits":"The account is Cloudflare's report; this evidence does not independently verify the investigation or its findings. Cloudflare reports a small number of affected customers but does not identify them or detail the contents of every affected response. Cloudflare says its prototype was disabled due to reliability issues and that a production version across model architectures is still in development.","speaker":{"name":"Cloudflare","roleAtSource":"Publisher"},"source":{"title":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","publisher":"Cloudflare Blog","format":"Article","url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","publishedAt":"2026-10-26T22:01:23.889Z","dateBasis":"Date stated by the publisher."},"evidence":[{"text":"Cloudflare says the exposure affected 155 responses, all to prompts longer than 681,280 tokens, between August 27 and September 9, 2026.","excerpt":"In total, 155 responses were affected, all to prompts longer than 681,280 tokens.","url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","relationship":"Source-stated"},{"text":"Cloudflare attributes the exposure to a mismatch between the model context length and KV cache pool, combined with an SGLang rejection-path bug in disaggregated prefill/decode mode.","excerpt":"This specific report of cross-request KV cache exposure was the result of two overlapping issues.","url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","relationship":"Source-stated"},{"text":"Cloudflare says the decode node could read stale cache pages because it treated a transfer of a placeholder prompt's KV cache as complete.","excerpt":"The decode node subsequently generated a response while attending over stale cache pages that still held data from earlier requests.","url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","relationship":"Source-stated"},{"text":"Cloudflare says it expanded the pool, patched the engine, and validated the changes before restoring the model.","excerpt":"We validated both changes against the researcher's reproduction script and our own canary-marker tests before restoring the model.","url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","relationship":"Source-stated"},{"text":"Cloudflare reports finding no evidence of deliberate exploitation.","excerpt":"We found no evidence of deliberate exploitation.","url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","relationship":"Source-stated"},{"text":"Cloudflare says its prototype for checking KV page ownership at read time was disabled after reliability issues, and it is working toward a production version across models.","excerpt":"We tested it on GLM 5.2 in mid-August, but disabled it shortly afterwards due to reliability issues.","url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","relationship":"Source-stated"}],"sourceMedia":{"status":"found","sourceUrl":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","checkedAt":"2026-10-29T16:34:35.095Z","items":[{"type":"image","url":"https://blog.cloudflare.com/_image?href=https%3A%2F%2Fblog.cloudflare.com%2F_emdash%2Fapi%2Fmedia%2Ffile%2F01M5X2P2KSNBX6J13E3B4219PW.png&w=1280&h=720&f=webp&fit=cover&position=center","sourceUrl":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","attribution":"Cloudflare Blog","basis":"publisher-embed","availability":"verified","verifiedAt":"2026-10-29T16:34:35.669Z"}],"note":"Media declared by the original publisher; availability checked separately from the editorial reading."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"How broadly can KV page-ownership checks work across model architectures without introducing reliability or performance costs?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"Cloudflare details cross-request KV cache exposure in GLM-5.3 and its remediation","summary":"Cloudflare reports that a configuration mismatch and an SGLang bug allowed some GLM-5.3 Workers AI responses to include data from other customers’ requests. The company says the exposure affected 155 responses between August 27 and September 9, 2026, all to prompts longer than 681,280 tokens.\n\nCloudflare explains that the model’s context window exceeded the KV cache pool available on prefill GPUs. When SGLang rejected an over-length prompt, disaggregated prefill/decode processing still passed a placeholder cache to a decode node. The node treated the transfer as complete and could read stale cache pages left by earlier requests.\n\nCloudflare says it expanded the pool, patched the rejection path, and restored the model on September 9, 2026. It also reports testing the changes against the researcher’s reproduction script and its own canary-marker tests. The company recommends operators using disaggregated SGLang compare KV pool size with context length and use a build containing the relevant fixes.\n\nCloudflare says it found no evidence of deliberate exploitation, but this is its account of the investigation. Its longer-term proposal is to check page ownership at read time; the described prototype was disabled after reliability issues. How broadly can such checks work across model architectures without introducing reliability or performance costs?","question":"How broadly can KV page-ownership checks work across model architectures without introducing reliability or performance costs?","claims":[{"text":"Cloudflare says the exposure affected 155 responses, all to prompts longer than 681,280 tokens, between August 27 and September 9, 2026.","excerpt":"In total, 155 responses were affected, all to prompts longer than 681,280 tokens.","support":"source-stated"},{"text":"Cloudflare attributes the exposure to a mismatch between the model context length and KV cache pool, combined with an SGLang rejection-path bug in disaggregated prefill/decode mode.","excerpt":"This specific report of cross-request KV cache exposure was the result of two overlapping issues.","support":"source-stated"},{"text":"Cloudflare says the decode node could read stale cache pages because it treated a transfer of a placeholder prompt's KV cache as complete.","excerpt":"The decode node subsequently generated a response while attending over stale cache pages that still held data from earlier requests.","support":"source-stated"},{"text":"Cloudflare says it expanded the pool, patched the engine, and validated the changes before restoring the model.","excerpt":"We validated both changes against the researcher's reproduction script and our own canary-marker tests before restoring the model.","support":"source-stated"},{"text":"Cloudflare reports finding no evidence of deliberate exploitation.","excerpt":"We found no evidence of deliberate exploitation.","support":"source-stated"},{"text":"Cloudflare says its prototype for checking KV page ownership at read time was disabled after reliability issues, and it is working toward a production version across models.","excerpt":"We tested it on GLM 5.2 in mid-August, but disabled it shortly afterwards due to reliability issues.","support":"source-stated"}],"limitations":["The account is Cloudflare's report; this evidence does not independently verify the investigation or its findings.","Cloudflare reports a small number of affected customers but does not identify them or detail the contents of every affected response.","Cloudflare says its prototype was disabled due to reliability issues and that a production version across model architectures is still in development."],"mediaId":"e77549dba84aa9c32f2e4139e6b5e0ef39ce118d94ae16269a7ade40275b9850","correctionReason":null,"id":"ddf6cd38671b8e65acc068399410cec22dff1e2dc19a40b7dad1c0ede26828a7","publicationId":"efb8f4af-7335-44d1-8890-758a88fd837f","version":1,"sourceUrl":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","sourceTitle":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","publisher":"Cloudflare","publishedAt":"2026-10-26T22:01:23.889Z","originalPublished":{"value":"2026-10-26T22:01:23.889Z","precision":"instant","basis":"publisher_page"},"firstObservedAt":"2026-10-26T22:11:02.530Z","createdAt":"2026-11-06T02:02:36.928Z","historical":true,"entityIds":["cloudflare"],"topicIds":["power-and-infrastructure","institutions-and-trust"],"media":[{"id":"e77549dba84aa9c32f2e4139e6b5e0ef39ce118d94ae16269a7ade40275b9850","kind":"article","url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","sourceUrl":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-10-29T16:34:35.669Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."},{"id":"6d5c37696693d0d91223bf0e070d56bae836f4d50f231c2cd978b2ea8bce4014","kind":"image","url":"https://blog.cloudflare.com/_image?href=https%3A%2F%2Fblog.cloudflare.com%2F_emdash%2Fapi%2Fmedia%2Ffile%2F01M5X2P2KSNBX6J13E3B4219PW.png&w=1280&h=720&f=webp&fit=cover&position=center","sourceUrl":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","label":"View source image","provenance":"publisher_page","verification":{"status":"verified","checkedAt":"2026-10-29T16:34:35.669Z","method":"publisher_association_and_head","contentType":"image/webp","cacheUntil":1793291675669},"recommendationReason":"Observed on the acquired publisher source; availability checked."}],"sourceMedia":{"status":"found","sourceUrl":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","checkedAt":"2026-10-29T16:34:35.095Z","items":[{"type":"image","url":"https://blog.cloudflare.com/_image?href=https%3A%2F%2Fblog.cloudflare.com%2F_emdash%2Fapi%2Fmedia%2Ffile%2F01M5X2P2KSNBX6J13E3B4219PW.png&w=1280&h=720&f=webp&fit=cover&position=center","sourceUrl":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","attribution":"Cloudflare Blog","basis":"publisher-embed","availability":"verified","verifiedAt":"2026-10-29T16:34:35.669Z"}],"note":"Media declared by the original publisher; availability checked separately from the editorial reading."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v5","mediaId":"e77549dba84aa9c32f2e4139e6b5e0ef39ce118d94ae16269a7ade40275b9850","confidence":0.97,"provider":"typesafe","model":"jev-1.13.0","inputHash":"cb2d4f255ed81fb1433d14512511ac9f5d27c8150c23d67559d6dc96ce1ba6c2","decidedAt":"2026-10-29T16:34:38.917Z"},"provenance":{"textHash":"e6a3129bcac48b1dfcd4a23991dc558440b40a73950cabaa95789f96b0fb4700","observationId":"3fd813689f55a0aa8fd8a864e2b16004c5298e7b93934b9e0dc89fb9364288ac","retrievedAt":"2026-10-29T16:34:35.095Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"ae8feda7-782a-4439-8761-4834fa3e362d"},"reviewer":{"model":"gpt-6-luna","runId":"ceb19ad4-fe8e-4616-8641-e1b5ae858523"}},"audit":{"status":"passed","reviewedAt":"2026-11-06T02:02:36.928Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[],"authorRole":"article-author","hosts":[],"status":"missing","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Cloudflare Blog","url":null,"kind":"unknown","actorId":null},"role":"publisher","scope":{"kind":"publication","locator":null},"literalCredit":"Cloudflare Blog","status":"stated","provenance":{"basis":"article-publisher","sourceUrl":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","locator":"document/html[1]/head[0]/script[56]@12137.publisher"},"assertionId":"4a0aa2ee66a80d735dd322ac0f44c3aa0ae1b030fc02e6d0ea43edddbfceea4b:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-10-29T16:34:35.095Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"4a0aa2ee66a80d735dd322ac0f44c3aa0ae1b030fc02e6d0ea43edddbfceea4b","sourceUrl":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","contentSha256":"0ef6cee4c2b8aaeef2c72b782091b2a4f70a22bb50e76881fe64d45ab361c13a","textHash":"e6a3129bcac48b1dfcd4a23991dc558440b40a73950cabaa95789f96b0fb4700","observedAt":"2026-10-29T16:34:35.095Z"}}],"participationCoverage":{"total":1,"returned":1,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":{"name":"Cloudflare Blog","url":null},"sourceUrl":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","snapshotId":"4a0aa2ee66a80d735dd322ac0f44c3aa0ae1b030fc02e6d0ea43edddbfceea4b","contentSha256":"0ef6cee4c2b8aaeef2c72b782091b2a4f70a22bb50e76881fe64d45ab361c13a","textHash":"e6a3129bcac48b1dfcd4a23991dc558440b40a73950cabaa95789f96b0fb4700","observedAt":"2026-10-29T16:34:35.095Z","basis":"publisher-page-metadata","sourceLinks":68,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/ddf6cd38671b8e65acc068399410cec22dff1e2dc19a40b7dad1c0ede26828a7/source"}}}],"audits":[{"publicationId":"efb8f4af-7335-44d1-8890-758a88fd837f","verdict":"passed","findings":[{"dimension":"attribution","status":"pass","explanation":"The draft consistently attributes the incident account, cause, remediation, no-exploitation finding and recommendations to Cloudflare. It also notes that this is the company's own account, which matches the publisher-page source.","excerpt":"Today we are publishing this report alongside a post from SGLang, the open-source inference engine that we use, as a coordinated disclosure."},{"dimension":"summary","status":"pass","explanation":"The draft accurately leads with what happened: other customers' data appeared in 155 responses. It then explains the two causes, the fix, the advice to operators and the longer-term idea. Technical terms such as KV cache and prefill/decode are kept exactly for tooltips. The draft also notes that SGLang is software other operators use. The title and question follow from the evidence and are not leading.","excerpt":"As a result, responses to prompts longer than 681,280 tokens could contain data from other users' GLM 5.3 sessions."},{"dimension":"date","status":"pass","explanation":"originalPublished is 2026-10-26, which matches the source's statement that the report was published in coordination with the researcher and RadixArk on Oct 26, 2026. The incident dates in the draft (Aug 27 to Sep 9, restored Sep 9) also match the source.","excerpt":"Oct 26, 2026\nCoordinated publication with the researcher and RadixArk."},{"dimension":"support","status":"pass","explanation":"Each claim is source-stated with matching excerpts. These include the 155 affected responses, the two overlapping causes, stale pages being read, validation before restoring the model, no evidence of exploitation, and the prototype being disabled. The question about cost and reliability across model architectures follows from the source's prototype limits. The draft adds no unsupported claims about benefits or harms.","excerpt":"The prototype was also tied to specific attention backends and model architectures, so it could not be a general fix."},{"dimension":"media","status":"pass","explanation":"The selected media is the verified direct link to the original Cloudflare article. This is the most direct way for readers to reach the source.","excerpt":null}],"createdAt":"2026-11-06T02:02:36.928Z","model":"anthropic/claude-opus-5.5"}],"correctionUrl":"https://escapemeridian.com/corrections/"}