Cloudflare Reports GLM-5.3 Bug Leaked 155 Responses Across Tenant Sessions

Cloudflare disclosed that a bug in its integration of GLM-5.3 caused 155 responses to be delivered to the wrong tenant sessions, constituting a cross-tenant data leak in a production AI serving environment. The incident is notable because it demonstrates a class of vulnerability specific to multi-tenant LLM infrastructure, where session or context isolation can fail at the serving layer rather than the model layer itself. Cloudflare has stated the bug has been patched, but the disclosure is an important signal for any developer deploying shared AI inference infrastructure. Teams running multi-tenant AI applications should audit their session isolation and response routing logic regardless of provider. This is the kind of security incident that will likely drive new compliance requirements for AI serving platforms.