CLAIM-2026-09-28-05

The vulnerability would potentially have allowed a customer with a Workers Paid account to recover residual data from storage blocks previously used by other customers' Containers; a 4 KiB write into ext4 free space triggered allocation of a previously used block and a subsequent raw-device read could observe bytes the new container had never written.

Why it matters

The attacker precondition is a paid account, not an exploit chain. That changes the plausibility of the threat model, not just its severity.

Sources

• cloudflare2026how