Context isolation Data exposure
When an AI response contains another customer’s context
- Incident
- August 27–September 9, 2026
- Source report
What was reported
Cloudflare reported that 155 responses from its GLM-5.3 Workers AI model contained data from other customers’ recent requests between August 27 and September 9, 2026. The report linked the exposure to an inference-engine configuration issue and a software bug. Cloudflare said it found no evidence of deliberate exploitation, remediated the issue, and confirmed that no other Workers AI model was affected.
Our perspective
Our reading: choosing what to send is only one boundary. The service receiving that context also needs to keep requests isolated. For Vivendur, this reinforces the need to examine both the information selected for a task and the environment that processes it.
Explore context selection