Cloudflare’s GLM-5.3 cache leak crossed a request boundary after an internal rejection
155 GLM-5.3 responses exposed other customers’ material.
The big change
What changed: Cloudflare’s GLM-5.3 accepted prompts longer than its prefill cache could hold. In disaggregated SGLang, an internal rejection continued through handoff; Cloudflare enlarged the pool and patched that path before restoring service.
Why it matters: Decode reserved pages for the original prompt but received cache for only a one-token placeholder. It read earlier requests’ remaining state and could put another customer’s material in the answer, despite an HTTP success.
What to watch: Check the running cache capacity against the offered context and whether rejected work exits before transfer. Cloudflare recommends SGLang v0.5.22 or later; its separate abort safeguards depend on safe page reuse after transfers.







