Between Aug. 27 and Sept. 9, 2026, a software bug let oversized requests bypass rejection on Cloudflare’s Workers AI service and draw on cached data from earlier requests. 155 responses from the GLM-5.3 model contained other customers’ information, including names, invoice details, source-code information, filesystem paths and AI agent records. Cloudflare found no evidence of deliberate exploitation, fixed the configuration and patched the open-source SGLang engine, and disclosed the issue on Oct. 26.