Summary: Researchers have published a proof-of-concept attack demonstrating a remote Spectre side-channel against Cloudflare Workers, successfully extracting a JSON Web Token from a co-located Worker in a production environment at a rate of up to 12 bits per second—a significant improvement over previous research from 2021.

Body:

A newly disclosed proof-of-concept demonstrates a successful remote Spectre attack targeting Cloudflare's Workers platform. The research team was able to extract a JSON Web Token (JWT) from a victim Worker running in the same environment as an attacker-controlled Worker, all within the production infrastructure.

This new attack achieves a data exfiltration rate of up to 12 bits per second. This represents a 360-fold increase in transmission speed compared to an earlier Spectre-based attack against the same platform, which was demonstrated in 2021. The ability to remotely leak sensitive credentials like JWTs from co-located workloads poses a significant concern for multi-tenant serverless environments.

The end-to-end experiment was conducted using two Worker instances: one serving as the attacker and the other as the victim. The attack was designed and executed solely by the researchers to validate the vulnerability and measure its practical impact. Details on the specific exploitation techniques and the attack chain have been published in the official disclosure.

This research highlights the ongoing challenges of securing shared cloud infrastructure against speculative execution side-channel attacks. While microarchitectural mitigations exist, verifying their effectiveness in dynamic edge computing platforms remains a complex and ongoing task.

For further details, please see the original report by The Hacker News.

Source: The Hacker News
URL: https://thehackernews.com/2026/08/cloudflare-workers-spectre-attack-leaks.html