<![CDATA[Cloudflare fixes Containers cross-tenant flaw exposing customer data]]>Cloudflare has patched a security flaw in Containers and Sandboxes that could have let customers on a Workers Paid plan recover leftover data belonging to other customers whose containers ran on the same physical host. The issue is a cross-tenant isolation problem, meaning a malicious or curious user could potentially access residual data left behind in memory or storage from another tenant's container workload.

Key points about the flaw:

  • Affected products: Cloudflare Containers and Sandboxes
  • Affected users: customers with a Workers Paid account
  • Impact: potential recovery of residual data from other customers' containers on the same host
  • Status: the vulnerability has been fixed by Cloudflare

While the exact exploitation requirements and the scope of exposed data have not been detailed in the report, this kind of cross-tenant leak is significant because it undermines the isolation guarantees that multi-tenant cloud platforms are built on. If you are running workloads on Cloudflare Containers or Sandboxes, it is worth reviewing your security posture and checking for any official Cloudflare guidance.

No specific CVE ID was provided in the source, so none is listed here.

Source: BleepingComputer

Are you using Cloudflare Containers or Sandboxes in production, and if so, how are you handling tenant isolation now?

]]>https://xploitlk.com/topic/485/cloudflare-fixes-containers-cross-tenant-flaw-exposing-customer-dataRSS for NodeTue, 27 Oct 2026 10:36:06 GMTSun, 27 Sep 2026 14:30:22 GMT60