{"id":7186,"date":"2026-10-26T16:00:00","date_gmt":"2026-10-26T16:00:00","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak"},"modified":"2026-10-26T16:00:00","modified_gmt":"2026-10-26T16:00:00","slug":"cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak","title":{"rendered":"Cloudflare Workers AI: GLM-5.3 Returned 155 Responses That Contained Other Tenants\u2019 Data"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">A shared inference cache leaked other customers&#8217; prompts and partial answers. In a <a href=\"https:\/\/blog.cloudflare.com\/kv-cache-exposure-remediation\/\" target=\"_blank\" rel=\"noreferrer noopener\">October 26, 2026 post<\/a>, Cloudflare said that between August 27 and September 9, &#8220;a small number of customers using the GLM 5.3 Workers AI model received responses that contained data from other customers&#8217; requests made to the same model shortly before theirs.&#8221; In total, &#8220;155 responses were affected, all to prompts longer than 681,280 tokens.&#8221; Researcher Gadi Evron of Knostic reported the issue through HackerOne on September 8. Cloudflare says it has &#8220;confirmed that no other model hosted on Workers AI was affected,&#8221; and that it found &#8220;no evidence of deliberate exploitation.&#8221;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u26a1 Quick Take<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>What leaked:<\/strong> Other tenants&#8217; recent prompts and partial generations, in 155 GLM-5.3 responses on Workers AI (<code>@cf\/zai-org\/glm-5.3<\/code>).<\/li><li><strong>Who was hit:<\/strong> Only requests longer than 681,280 tokens. After excluding Cloudflare&#8217;s tests and the researcher&#8217;s, Cloudflare says the remaining traffic looked like ordinary long-context use.<\/li><li><strong>Root cause:<\/strong> Two stacked failures. Cloudflare deployed GLM-5.3 with a 1,048,576-token context window but a prefill KV-cache pool of only 681,280 tokens, and an SGLang bug in disaggregated prefill\/decode mode then served stale cache pages instead of returning an error.<\/li><li><strong>Response:<\/strong> Incident declared September 9; model taken private within about 40 minutes of confirmation; restored the same day at 19:40 UTC after a larger KV pool and an engine patch. Cloudflare recommends other SGLang operators upgrade to v0.5.22 or later.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">What happened<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Workers AI runs GLM-5.3, a Z.ai model aimed at long agentic coding prompts, on SGLang in a disaggregated setup: prefill GPUs build the model&#8217;s KV cache, then hand it to decode GPUs that generate the answer. KV pages live in a shared pool and are not zeroed between requests; the engine is supposed to track who owns which page.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cloudflare knew, before launch, that the prefill pool was smaller than the advertised context window. It expected over-long prompts to fail. Instead, tests returned HTTP 200. In production, when a prompt did not fit the pool, SGLang marked the request as rejected and swapped in a one-token placeholder, but in disaggregated mode the decode node still reserved pages for the original long prompt, received only a tiny transfer, and then attended over leftover cache from earlier requests. The client saw a normal-looking 200 response that could contain another tenant&#8217;s data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Evron&#8217;s report arrived at 23:11 UTC on September 8. Cloudflare began verifying at 08:00 UTC on September 9, declared an incident at 13:22, set the model private at 14:00, and restored it at 19:40 after enlarging the pool to about 2.04 million tokens and patching the rejection path. It later worked with SGLang&#8217;s maintainers at RadixArk on upstream fixes, including retiring rejected requests before any KV transfer.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What it means<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This is a tenant-isolation failure in a hosted model API, which is as serious as it sounds, even with a modest count of 155 responses and no evidence of targeted abuse. The uncomfortable detail is that Cloudflare knew the pool and the context window disagreed, and trusted HTTP status codes instead of checking the engine&#8217;s actual cache math. Its own advice to other operators is the right checklist: measure KV pool against context length on every node after every config change, upgrade SGLang, and do not assume the engine will fail closed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Customers who sent GLM-5.3 prompts longer than 681,280 tokens between August 27 and September 9 should assume some of that text could have appeared in another tenant&#8217;s response, and that they could have received someone else&#8217;s. Cloudflare&#8217;s post does not describe a customer notification with those exact 155 request IDs in the public text; affected firms should ask Cloudflare directly if they need confirmation.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u270d\ufe0f About the analysis<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This i10x report is based on Cloudflare&#8217;s October 26, 2026 engineering post, including the timeline, counts, and SGLang technical detail published there. i10x did not reproduce the leak.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sources<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/blog.cloudflare.com\/kv-cache-exposure-remediation\/\" target=\"_blank\" rel=\"noreferrer noopener\">Cloudflare Blog: Cross-request KV cache exposure in the GLM-5.3 Workers AI model<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>On October 26, 2026, Cloudflare disclosed a cross-tenant leak in the GLM-5.3 model on Workers AI: 155 responses, all to prompts longer than 681,280 tokens, contained data from other customers\u2019 recent requests. The model was taken offline on September 9 and restored the same day after a configuration fix and an SGLang patch.<\/p>\n","protected":false},"author":2,"featured_media":7185,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":"65","_nx_sec_severity":"high","_nx_sec_affected":"Cloudflare Workers AI (GLM-5.3)","_nx_sec_status":"mitigated","_nx_sec_kicker":"URGENT: Cloudflare\u2019s GLM-5.3 leaked other customers\u2019 prompts"},"categories":[65,11,9,12,28],"tags":[],"companies":[],"products":[],"class_list":["post-7186","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-security","category-infrastructure","category-models","category-policy-safety","category-security-defense"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Cloudflare GLM-5.3 Leak: 155 Cross-Tenant Responses<\/title>\n<meta name=\"description\" content=\"Cloudflare GLM-5.3 on Workers AI returned 155 responses with other tenants\u2019 data from a KV-cache bug, between August 27 and September 9, 2026.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cloudflare GLM-5.3 Leak: 155 Cross-Tenant Responses\" \/>\n<meta property=\"og:description\" content=\"Cloudflare GLM-5.3 on Workers AI returned 155 responses with other tenants\u2019 data from a KV-cache bug, between August 27 and September 9, 2026.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-26T16:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"Cloudflare Workers AI: GLM-5.3 Returned 155 Responses That Contained Other Tenants\u2019 Data\",\"datePublished\":\"2026-10-26T16:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak\"},\"wordCount\":645,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak-title.webp\",\"articleSection\":[\"AI Security\",\"Infrastructure\",\"Models\",\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\",\"dateModified\":\"2026-10-26T16:00:00+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak\",\"name\":\"Cloudflare GLM-5.3 Leak: 155 Cross-Tenant Responses\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak-title.webp\",\"datePublished\":\"2026-10-26T16:00:00+00:00\",\"description\":\"Cloudflare GLM-5.3 on Workers AI returned 155 responses with other tenants\u2019 data from a KV-cache bug, between August 27 and September 9, 2026.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"A cool, empty colocation aisle with perforated floor tiles and a single work light, no logos or readable rack labels.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cloudflare Workers AI: GLM-5.3 Returned 155 Responses That Contained Other Tenants\u2019 Data\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cloudflare GLM-5.3 Leak: 155 Cross-Tenant Responses","description":"Cloudflare GLM-5.3 on Workers AI returned 155 responses with other tenants\u2019 data from a KV-cache bug, between August 27 and September 9, 2026.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak","og_locale":"en_US","og_type":"article","og_title":"Cloudflare GLM-5.3 Leak: 155 Cross-Tenant Responses","og_description":"Cloudflare GLM-5.3 on Workers AI returned 155 responses with other tenants\u2019 data from a KV-cache bug, between August 27 and September 9, 2026.","og_url":"https:\/\/i10xnews.kinsta.cloud\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak","og_site_name":"i10X News","article_published_time":"2026-10-26T16:00:00+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"Cloudflare Workers AI: GLM-5.3 Returned 155 Responses That Contained Other Tenants\u2019 Data","datePublished":"2026-10-26T16:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak"},"wordCount":645,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak-title.webp","articleSection":["AI Security","Infrastructure","Models","Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US","dateModified":"2026-10-26T16:00:00+00:00"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak","url":"https:\/\/i10xnews.kinsta.cloud\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak","name":"Cloudflare GLM-5.3 Leak: 155 Cross-Tenant Responses","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak-title.webp","datePublished":"2026-10-26T16:00:00+00:00","description":"Cloudflare GLM-5.3 on Workers AI returned 155 responses with other tenants\u2019 data from a KV-cache bug, between August 27 and September 9, 2026.","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak-title.webp","width":1344,"height":768,"caption":"A cool, empty colocation aisle with perforated floor tiles and a single work light, no logos or readable rack labels."},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/cloudflare-workers-ai-glm-5-3-kv-cache-cross-tenant-leak#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"Cloudflare Workers AI: GLM-5.3 Returned 155 Responses That Contained Other Tenants\u2019 Data"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"}}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7186","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=7186"}],"version-history":[{"count":0,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7186\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/7185"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=7186"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=7186"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=7186"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=7186"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=7186"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}