PulseAugur
EN
LIVE 18:51:32

Cloudflare GLM-5.3 model leaked tenant KV cache data due to SGLang bug

By PulseAugur Editorial · [2 sources] ·

Cloudflare experienced a data leak between August and September 2026, where fragments of one tenant's KV cache state were exposed in 155 responses from its GLM-5.3 model on Workers AI. This occurred due to a combination of a configuration mismatch in the KV cache pool size and a bug in the SGLang library's disaggregated serving mode. The issue was resolved by increasing the KV pool capacity and patching SGLang to properly handle rejected requests, preventing stale data from being accessed. AI

IMPACT Highlights the critical need for robust KV cache management and SGLang's disaggregated serving to prevent tenant data exposure in LLM deployments.

RANK_REASON The article details a specific bug and its remediation in a deployed AI model, which falls under tooling and infrastructure rather than a new model release or significant industry shift.

Read on dev.to — LLM tag →

AI-generated summary · Google Gemini · from 2 sources. How we write summaries →

Cloudflare GLM-5.3 model leaked tenant KV cache data due to SGLang bug

How we ranked this

Signal score
0 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
The article details a specific bug and its remediation in a deployed AI model, which falls under tooling and infrastructure rather than a new model release or significant industry shift.
Source corroboration
2 independent sources
Multiple independent publishers reporting the same story raises confidence that it's real and newsworthy.
Topics
product, infra
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
3 days old
Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.

Full methodology in our editorial standards.

COVERAGE [2]

  1. dev.to — MCP tag TIER_1 English(EN) · Mike Moore ·

    Why Cloudflare's GLM-5.3 KV Cache Leaked Across Tenants

    <p><em>Originally published at <a href="https://webofmike.com/cloudflare-glm-kv-cache-leak/?utm_source=devto&amp;utm_medium=syndication&amp;utm_campaign=cloudflare-glm-kv-cache-leak" rel="noopener noreferrer">webofmike.com</a> on 2026-10-31. The demo repo and every command in it …

  2. dev.to — LLM tag TIER_1 English(EN) · AI Tech News ·

    When Is a KV Cache Slot Actually Free? Lessons From the SGLang and Cloudflare Cross-Request Exposure

    <h2> TL;DR </h2> <ul> <li> <strong>What was reported:</strong> On 2026-10-26, Cloudflare and the SGLang team disclosed that Cloudflare's GLM-5.3 deployment on Workers AI returned <strong>155 responses</strong> containing data from other customers' requests between 2026-08-27 and …

RELATED ENTITIES

RELATED TOPICS