importantSYS.SOURCE: The Hacker News• 2026-09-25T10:19:22+05:30

Cloudflare Addresses Container Security Flaw Allowing Cross-Customer Disk Data Access

#container security #data exposure #vulnerability

Cloudflare addressed a vulnerability in its Containers service that allowed one customer's container to access leftover disk data from another customer's deleted container via improperly wiped storage blocks. The flaw was fixed by re-enabling disk wiping and clearing caches, with no evidence of malicious exploitation found.

A flaw in Cloudflare Containers let a paying customer read data that other customers' containers had left behind on the same server, Cloudflare and the researchers who found it said on Thursday.

The data came from disk space that earlier containers had used and given up, not from any live workload, and an attacker could not choose whose data they got, according to Cloudflare. The company

Read original article

*** END OF TRANSMISSION ***

> INK & SWITCH 10TH ANNIVERSARY INTERACTIVE ART AND RESEARCH OVERVIEW > HUMANIST SKILLS CRUCIAL FOR NAVIGATING AI-DRIVEN TECH CHALLENGES > OPENAI SPECIAL PROJECTS 2016: DISCUSSION THREAD > DUTCH GOVERNMENT DEVELOPS CUSTOM OS ALTERNATIVE USING NIXOS FOR NATIONAL INFRASTRUCTURE > EMULATING PENTIUM II 600MHZ WITH VOODOO 3 ON 86BOX VIA M6 MAC MINI > EXPLOITING CVE-2025-13032 IN AVAST ANTIVIRUS KERNEL DRIVER FOR PRIVILEGE ESCALATION > LIGHTSPEED LAUNCHES $250M EARLY-STAGE AI FUND IN INDIA TO FUEL TECH INNOVATION > JEV CODE REVIEWER: AI-POWERED CODE CHANGE CLASSIFICATION AND EXPLANATION TOOL > CLOUDFLARE ADDRESSES CONTAINER SECURITY FLAW ALLOWING CROSS-CUSTOMER DISK DATA ACCESS > CRITICAL VULNERABILITIES IN WSO2 AND ADOBE COMMERCE EXPLOITED IN ACTIVE ATTACKS, ADDED TO CISA KEV> INK & SWITCH 10TH ANNIVERSARY INTERACTIVE ART AND RESEARCH OVERVIEW > HUMANIST SKILLS CRUCIAL FOR NAVIGATING AI-DRIVEN TECH CHALLENGES > OPENAI SPECIAL PROJECTS 2016: DISCUSSION THREAD > DUTCH GOVERNMENT DEVELOPS CUSTOM OS ALTERNATIVE USING NIXOS FOR NATIONAL INFRASTRUCTURE > EMULATING PENTIUM II 600MHZ WITH VOODOO 3 ON 86BOX VIA M6 MAC MINI > EXPLOITING CVE-2025-13032 IN AVAST ANTIVIRUS KERNEL DRIVER FOR PRIVILEGE ESCALATION > LIGHTSPEED LAUNCHES $250M EARLY-STAGE AI FUND IN INDIA TO FUEL TECH INNOVATION > JEV CODE REVIEWER: AI-POWERED CODE CHANGE CLASSIFICATION AND EXPLANATION TOOL > CLOUDFLARE ADDRESSES CONTAINER SECURITY FLAW ALLOWING CROSS-CUSTOMER DISK DATA ACCESS > CRITICAL VULNERABILITIES IN WSO2 AND ADOBE COMMERCE EXPLOITED IN ACTIVE ATTACKS, ADDED TO CISA KEV