{"schema_version":"onlylabs.public_signal.v1","title":"Cloudflare (Workers AI) Writing: Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","description":"Cloudflare (Workers AI) writing signal with public source context, captured evidence pages, related signals, and category-scoped analysis context.","url":"https://onlylabs.fyi/signals/c4eae839-a0c9-41eb-ac57-dc20e86fb050","json_url":"https://onlylabs.fyi/signals/c4eae839-a0c9-41eb-ac57-dc20e86fb050/signal.json","generated_at":"2026-10-27T07:47:20.587Z","evidence_latest_fetched_at":"2026-10-27T00:03:00.08834+00:00","signal_first_seen_at":"2026-10-27T00:00:52.753914+00:00","org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud","category_label":"Neocloud","dossier_url":"https://onlylabs.fyi/labs/cloudflare","dossier_json_url":"https://onlylabs.fyi/labs/cloudflare/dossier.json"},"related_urls":{"signal":"https://onlylabs.fyi/signals/c4eae839-a0c9-41eb-ac57-dc20e86fb050","signal_json":"https://onlylabs.fyi/signals/c4eae839-a0c9-41eb-ac57-dc20e86fb050/signal.json","source":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","lab_dossier":"https://onlylabs.fyi/labs/cloudflare","lab_dossier_json":"https://onlylabs.fyi/labs/cloudflare/dossier.json","analysis":"https://onlylabs.fyi/analysis/cloudflare","analysis_json":"https://onlylabs.fyi/analysis/cloudflare/analysis.json","analysis_evidence_json":"https://onlylabs.fyi/analysis/cloudflare/evidence.json","category":"https://onlylabs.fyi/neoclouds","category_json":"https://onlylabs.fyi/neoclouds.json","category_feed":"https://onlylabs.fyi/neoclouds/feed.xml","category_signals_json":"https://onlylabs.fyi/signals.json?category=neocloud","topic":"https://onlylabs.fyi/topics/talking","topic_signals_json":"https://onlylabs.fyi/topics/talking/signals.json?category=neocloud","topic_feed":"https://onlylabs.fyi/topics/talking/feed.xml?category=neocloud","data_business":null},"answer_pack":{"answer":"Cloudflare (Workers AI) published Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang. This talking signal gives public context for research themes, product direction, policy, or launch framing. High-signal details: Substantive security disclosure with modest HN traction · Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang | Cloudflare Blog Skip to content On September 8, 2026, we were alerted.... onlylabs links this event to 1 captured evidence page and 6 related writing signals.","signal_desk":"talking","source_context":{"source_url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","source_host":"blog.cloudflare.com","occurred_at":"2026-09-08T00:00:00.000Z","first_seen_at":"2026-10-27T00:00:52.753914+00:00","date_source":"page.visible_date","context":null},"context_markers":[{"label":"Lab","value":"Cloudflare (Workers AI)","source":"signal"},{"label":"Signal desk","value":"talking","source":"signal"},{"label":"Source host","value":"blog.cloudflare.com","source":"source"},{"label":"Author","value":"Kevin Flansburg","source":"source"},{"label":"Notability","value":"Substantive security disclosure with modest HN traction","source":"signal"},{"label":"HN","value":"Praise for honest postmortem tempered by shared tenancy security worries and context window advertising doubts.","source":"source"},{"label":"Watch term","value":"Eval methodology","source":"evidence"},{"label":"Watch term","value":"Infrastructure","source":"evidence"},{"label":"Watch term","value":"Safety and alignment","source":"evidence"},{"label":"Watch term","value":"Agents and tool use","source":"evidence"}],"evidence_coverage":{"target_pages":1,"captured_pages":1,"readable_pages":1,"capture_methods":["plain"],"missing_page_urls":[],"failed_page_urls":[],"blocked_page_urls":[],"page_urls":["https://blog.cloudflare.com/kv-cache-exposure-remediation/"],"related_signals":6,"has_source_url":true,"latest_page_fetched_at":"2026-10-27T00:03:00.08834+00:00"},"data_business":{"matches":false,"lanes":[],"matched_terms":[],"score":null,"reason":null},"agent_handoff":{"signal_json":"https://onlylabs.fyi/signals/c4eae839-a0c9-41eb-ac57-dc20e86fb050/signal.json","dossier_json":"https://onlylabs.fyi/labs/cloudflare/dossier.json","analysis_json":"https://onlylabs.fyi/analysis/cloudflare/analysis.json","analysis_evidence_json":"https://onlylabs.fyi/analysis/cloudflare/evidence.json","topic_signals_json":"https://onlylabs.fyi/topics/talking/signals.json?category=neocloud","topic_feed":"https://onlylabs.fyi/topics/talking/feed.xml?category=neocloud","category_signals_json":"https://onlylabs.fyi/signals.json?category=neocloud","data_radar_json":null,"opportunities_json":null},"analysis_playbook":{"objective":"Turn public writing and discussion into a readable map of research themes, product framing, policy posture, launch narratives, and market attention.","evidence_focus":["post title","source URL","captured page text","HN traction","linked model or paper references","publication date"],"extraction_questions":["Which themes are labs choosing to explain publicly?","Which posts are attracting outside discussion?","Which writing reframes a recent release, model, hiring wave, or policy stance?","Which posts mention data, evals, infrastructure, safety, or deployment workflows?"],"signal_questions":["What public theme, launch framing, or research direction does this writing signal expose?","Which themes are labs choosing to explain publicly?","Which posts are attracting outside discussion?","Do the 6 related writing signals show a repeated pattern?"],"output_fields":["org","theme","public_framing","traction","evidence_url"],"data_business_relevance":"Data-business lane extraction is scoped to frontier labs; for this category, keep conclusions tied to category-specific strategy, source evidence, and follow-up questions.","required_sources":[{"label":"signal_json","url":"https://onlylabs.fyi/signals/c4eae839-a0c9-41eb-ac57-dc20e86fb050/signal.json","required":true},{"label":"source","url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","required":true},{"label":"dossier_json","url":"https://onlylabs.fyi/labs/cloudflare/dossier.json","required":true},{"label":"analysis_evidence_json","url":"https://onlylabs.fyi/analysis/cloudflare/evidence.json","required":true},{"label":"topic_signals_json","url":"https://onlylabs.fyi/topics/talking/signals.json?category=neocloud","required":false},{"label":"data_radar_json","url":null,"required":false}],"expected_output":["one-paragraph source-grounded interpretation","category-specific implication","confidence and missing evidence","recommended next source to inspect"],"prompt_seed":"Using only the linked onlylabs JSON, captured source context, and cited evidence, analyze Cloudflare (Workers AI)'s writing signal \"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang\" for neocloud strategy."},"semantic_triples":[{"subject":"Cloudflare (Workers AI)","predicate":"published","object":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","text":"Cloudflare (Workers AI) published Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang."},{"subject":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","predicate":"is classified as","object":"writing signal","text":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang is classified as writing signal."},{"subject":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","predicate":"belongs to","object":"talking desk","text":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang belongs to talking desk."},{"subject":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","predicate":"has evidence coverage","object":"1 captured evidence page","text":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang has evidence coverage 1 captured evidence page."},{"subject":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","predicate":"has captured page count","object":"1","text":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang has captured page count 1."},{"subject":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","predicate":"has readable page count","object":"1","text":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang has readable page count 1."},{"subject":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","predicate":"has related signal count","object":"6","text":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang has related signal count 6."},{"subject":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","predicate":"has analysis playbook objective","object":"Turn public writing and discussion into a readable map of research themes, product framing, policy posture, launch narratives, and market attention.","text":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang has analysis playbook objective Turn public writing and discussion into a readable map of research themes, product framing, policy posture, launch narratives, and market attention.."},{"subject":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","predicate":"has source host","object":"blog.cloudflare.com","text":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang has source host blog.cloudflare.com."},{"subject":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","predicate":"has lab","object":"Cloudflare (Workers AI)","text":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang has lab Cloudflare (Workers AI)."},{"subject":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","predicate":"has signal desk","object":"talking","text":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang has signal desk talking."},{"subject":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","predicate":"has source host","object":"blog.cloudflare.com","text":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang has source host blog.cloudflare.com."},{"subject":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","predicate":"has author","object":"Kevin Flansburg","text":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang has author Kevin Flansburg."},{"subject":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","predicate":"has notability","object":"Substantive security disclosure with modest HN traction","text":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang has notability Substantive security disclosure with modest HN traction."},{"subject":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","predicate":"has hn","object":"Praise for honest postmortem tempered by shared tenancy security worries and context window advertising doubts.","text":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang has hn Praise for honest postmortem tempered by shared tenancy security worries and context window advertising doubts.."},{"subject":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","predicate":"has watch term","object":"Eval methodology","text":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang has watch term Eval methodology."},{"subject":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","predicate":"has watch term","object":"Infrastructure","text":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang has watch term Infrastructure."}]},"intelligence":{"signal_desk":"talking","answer":"Cloudflare (Workers AI) published Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang. This talking signal gives public context for research themes, product direction, policy, or launch framing. High-signal details: Substantive security disclosure with modest HN traction · Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang | Cloudflare Blog Skip to content On September 8, 2026, we were alerted.... onlylabs links this event to 1 captured evidence page and 6 related writing signals.","semantic_triples":[{"subject":"Cloudflare (Workers AI)","predicate":"published","object":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","text":"Cloudflare (Workers AI) published Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang."},{"subject":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","predicate":"is classified as","object":"writing signal","text":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang is classified as writing signal."},{"subject":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","predicate":"belongs to","object":"talking desk","text":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang belongs to talking desk."},{"subject":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","predicate":"has evidence coverage","object":"1 captured evidence page","text":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang has evidence coverage 1 captured evidence page."}]},"signal":{"id":"c4eae839-a0c9-41eb-ac57-dc20e86fb050","url":"https://onlylabs.fyi/signals/c4eae839-a0c9-41eb-ac57-dc20e86fb050","json_url":"https://onlylabs.fyi/signals/c4eae839-a0c9-41eb-ac57-dc20e86fb050/signal.json","source_url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","title":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","summary":"Cloudflare (Workers AI) published a writing signal. onlylabs watches public writing for research themes, product direction, and model-launch context.","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-09-08T00:00:00.000Z","first_seen_at":"2026-10-27T00:00:52.753914+00:00","date_source":"page.visible_date","evidence_coverage":{"target_pages":1,"captured_pages":1,"readable_pages":1,"capture_methods":["plain"],"missing_page_urls":[],"failed_page_urls":[],"blocked_page_urls":[],"page_urls":["https://blog.cloudflare.com/kv-cache-exposure-remediation/"]},"facets":{},"traction":{"github_stars":null,"hn_points":36,"hn_comments":8,"hn_story_id":"50252159","hf_downloads":null,"hf_likes":null},"data_radar":null},"primary_evidence_page":{"is_primary":true,"source_match":true,"url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","final_url":"https://blog.cloudflare.com/kv-cache-exposure-remediation/","title":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang","http_status":200,"content_type":"text/html","capture_method":"plain","fetched_at":"2026-10-27T00:03:00.08834+00:00","bytes":308442,"raw_path":"e77549dba84aa9c32f2e4139e6b5e0ef39ce118d94ae16269a7ade40275b9850.html","content_hash":"fadcf644e7b489ac162be0434d4bde248f89b398c9b912c808c1d9c9eafd8c92","excerpt_chars":1200,"truncated":true,"excerpt":"Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang | Cloudflare Blog Skip to content On September 8, 2026, we were alerted by a security researcher, Gadi Evron from Knostic, to a tenant isolation issue affecting the GLM-5.3 Workers AI model ( @cf/zai-org/glm-5.3 ) starting on August 27, 2026. We have remediated the issue, and we restored the model on September 9. We have confirmed that no other model hosted on Workers AI was affected. Between August 27 and September 9, a small number of customers using the GLM 5.3 Workers AI model received responses that contained data from other customers' requests made to the same model shortly before theirs. In total, 155 responses were affected, all to prompts longer than 681,280 tokens. After excluding our own testing and the researcher's, the requests we identified are consistent in timing and volume with ordinary long-context use, not with someone repeatedly exploiting the bug. We found no evidence of deliberate exploitation. Today we are publishing this report alongside a post from SGLang, the open-source inference engine that we use, as a coordinated disclosure. This post describes the bug..."},"evidence_pages":[],"related_signals":[{"id":"9c9d357b-b379-4de0-ab2c-30764ba08632","url":"https://onlylabs.fyi/signals/9c9d357b-b379-4de0-ab2c-30764ba08632","source_url":"https://blog.cloudflare.com/origin-range-requests/","title":"Origin Range Requests: Serving large files without range-request tuning","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-10-23T18:22:59+00:00","first_seen_at":"2026-10-23T20:00:52.925659+00:00","date_source":"rss.item_date"},{"id":"36b8c4da-4f96-4abc-8a89-7ff3e47942cd","url":"https://onlylabs.fyi/signals/36b8c4da-4f96-4abc-8a89-7ff3e47942cd","source_url":"https://blog.cloudflare.com/post-quantum-geo-key-manager/","title":"Bringing post-quantum cryptography to geographically fenced key management","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-10-23T18:06:56+00:00","first_seen_at":"2026-10-23T20:00:52.925659+00:00","date_source":"rss.item_date"},{"id":"d9e0cfd4-b38f-4c15-bd9e-81cfe0ac8dfb","url":"https://onlylabs.fyi/signals/d9e0cfd4-b38f-4c15-bd9e-81cfe0ac8dfb","source_url":"https://blog.cloudflare.com/k-isms/","title":"Localizing compliance at scale: achieving South Korea’s ISMS certification","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-10-22T13:00:00+00:00","first_seen_at":"2026-10-22T16:00:54.670606+00:00","date_source":"rss.item_date"},{"id":"c52bb1e0-df36-4ab7-b8cd-a48a6f37dfef","url":"https://onlylabs.fyi/signals/c52bb1e0-df36-4ab7-b8cd-a48a6f37dfef","source_url":"https://blog.cloudflare.com/full-transaction-waf/","title":"Introducing full transaction detection for Cloudflare WAF","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-10-21T14:10:42+00:00","first_seen_at":"2026-10-21T16:00:52.275864+00:00","date_source":"rss.item_date"},{"id":"6c59f359-43de-4c9d-be79-876752c91605","url":"https://onlylabs.fyi/signals/6c59f359-43de-4c9d-be79-876752c91605","source_url":"https://blog.cloudflare.com/php-vulnerabilities-waf-protection/","title":"Cloudflare deploys protections against php2shell vulnerability","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-10-21T13:56:45+00:00","first_seen_at":"2026-10-21T16:00:52.275864+00:00","date_source":"rss.item_date"},{"id":"7cf512fd-f264-4ff0-ba38-acd212a3e47e","url":"https://onlylabs.fyi/signals/7cf512fd-f264-4ff0-ba38-acd212a3e47e","source_url":"https://blog.cloudflare.com/webmcp-commerce/","title":"How Commerce.com and Cloudflare are getting storefronts ready for AI agents","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-10-21T13:00:00+00:00","first_seen_at":"2026-10-21T16:00:52.275864+00:00","date_source":"rss.item_date"}]}