Cloudflare discloses GLM-5.3 KV cache leak that exposed other users' data
AICloudflare says a security researcher reported that GLM-5.3 on Workers AI returned responses containing data from other customers' requests. It says 155 responses were affected between August 27 and September 9, all to prompts over 681,280 tokens.
AIWhy it matters.
The post shows how a KV cache misconfiguration and an SGLang admission bug let one user's GLM-5.3 responses contain other users' data, and what operators should check.
Source details
Hacker News · AI (150+ points) · wondersky · blog.cloudflare.comPublished · added here
Original title: Cross-request KV cache exposure in the GLM-5.3 Workers AI model (155 responses)