Cloudflare stated that no customer data was compromised while the vulnerability existed. The company published the details of the investigation and the fix in a collaboration with Accomplish researcher Oren Yomtov on its official developer blog.
Tuesday, October 20, 2026
Story
Cloudflare Fixes Bug That Let Sandboxes Read Other Customers' Files
Cybersecurity26 days ago
Researchers at Accomplish identified a vulnerability in Cloudflare Containers that permitted a sandbox to access residual disk data from other users, including .env files, Chromium profiles, and SQLite databases. The flaw also affected Cloudflare Sandboxes and Browser Run because those services utilize the same disk implementation. Cloudflare has since fully remediated the issue to prevent unauthorized cross-customer file access.
Looking for more context or analysis?
Tilt chat provides reliable, tailored insights, alerts, and automations.