{"ok":true,"trend":{"id":199496,"platform":"mastodon","region":"global","key":"🤖 cloudflare containers/sandboxes cross-tenant data exposure: dm-thin storage pools ran with skip_block_zeroing, so a wo","title":"🤖 Cloudflare Containers/Sandboxes cross-tenant data exposure: dm-thin storage pools ran with skip_block_zeroing, so a Wo","url":"https://infosec.exchange/@cloud/117347004177415163","first_seen":"2026-09-28T06:07:42.371897Z","last_seen":"2026-09-28T06:07:42.371897Z","last_rank":8,"peak_rank":8,"last_volume":2,"peak_volume":2,"seen_count":1,"score":57.26,"category_hint":"cybersecurity","section":"technology","category":"cybersecurity","summary":"A cross-tenant data exposure flaw in Cloudflare's Containers and Sandboxes has been disclosed and fixed. The issue stemmed from dm-thin storage pools running with skip_block_zeroing enabled, meaning newly written 4 KiB pages into unmapped 64 KiB blocks could leave residual data on raw devices. A Workers Paid tenant could reportedly read up to 60 KiB of data left behind by a previous tenant from /dev/vdc. Cloudflare has patched the issue, and security communities are discussing the implications of shared-storage isolation failures in multi-tenant cloud platforms.","why":"Security researchers are discussing a newly disclosed and fixed isolation flaw that could have exposed one cloud tenant's data to another.","tone":"neutral","entities":["Cloudflare","Cloudflare Containers","Cloudflare Sandboxes","Cloudflare Workers"],"summarized_at":"2026-09-28T06:08:54.643525Z","meta":{"tag":"infosec","via":"scan","kind":"status","lang":"en","generic":0.03,"instance":"mastodon.social","tag_uses":585},"nw":0.46,"promo":0.02,"kind":"news_event","importance":1.79,"hidden":false,"hide_reason":null,"judged_at":"2026-09-28T06:07:42.937260Z","title_en":"Cloudflare fixes cross-tenant data exposure in Containers sandboxes","section_name":"Technology","category_name":"Cybersecurity","timeline":[{"captured_at":"2026-09-28T06:07:42.371897Z","rank":8,"volume":2}],"posts":[{"platform":"mastodon","url":"https://infosec.exchange/@cloud/117347004177415163","author":"cloud@infosec.exchange","title":null,"snippet":"🤖 Cloudflare Containers/Sandboxes cross-tenant data exposure: dm-thin storage pools ran with skip_block_zeroing, so a Workers Paid tenant could write 4 KiB into each unmapped 64 KiB block, then raw-read /dev/vdc and recover up to 60 KiB left by a previous tenant. Fixed…","posted_at":"2026-09-28T05:26:23Z","likes":2}],"elsewhere":[],"window":"7d"}}