companyCloudflare
confirmedlowVulnerabilityFirst reported Sep 25, 2026 · Disclosed Sep 25, 2026
Cloudflare: flaw let containers read other customers' leftover disk data
Cloudflare and the researchers who found it disclosed a flaw in Cloudflare Containers that allowed a paying customer to read data left behind by other customers' containers on the same server. Cloudflare said the data came from relinquished disk space rather than live workloads, and attackers could not choose whose data they obtained. The company has fixed the issue.
Members only
The full record: the timeline and 1 linked report
- Every update as it happened, with the status at each step
- Every report behind the record, newest first
- Alerts the moment Cloudflare — or anything else you track — is hit again
A free account is all it takes — no card, one minute.