Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data

A flaw in Cloudflare Containers let a paying customer read data that other customers' containers had left behind on the same server, Cloudflare and the researchers who found it said on Thursday. The data came from disk space that earlier containers had used and given up, not from any live workload, and an attacker could not choose whose data they got, according to Cloudflare. The company

Cloudflare fixed a cross-tenant flaw in Containers that could let one paying customer recover residual disk data left by another customer’s earlier container on the same host. Exposed remnants could include directory structures, database pages, SQLite databases, browser profiles, environment files, and credentials; the data was not from live workloads, could not be targeted to a specific customer, and Cloudflare reported no evidence of compromise. RealGround analysis: although the report concerns general cloud infrastructure rather than an AI model or agent, the same isolation and residual-data risks can affect AI workloads, prompts, credentials, and training or inference data, making platform security readiness and supply-chain governance relevant.