Cloudflare Fixes Cross‑Tenant Data Leak in Containers Platform

Cloudflare disclosed that it has deployed a security fix for a flaw in its Containers service that could have allowed one customer's workload to retrieve leftover disk data from another tenant sharing the same physical server.

The vulnerability stemmed from inadequate isolation of residual storage blocks on multi‑tenant hosts. When a container was terminated, fragments of its data could remain on the disk, and a subsequent container on the same machine could potentially read those fragments, exposing information that was never intended for the new tenant.

The issue first came to light through reporting by cybersecuritynews, prompting Cloudflare to investigate and confirm the risk. According to the company, the exposure was limited to the Containers platform and affected the global, multi‑tenant infrastructure that powers a range of customer workloads.

While the flaw did not automatically grant full system access, the possibility of recovering stray files raised concerns for organizations that handle sensitive or regulated data. Data leakage of this nature could undermine confidentiality obligations, affect compliance certifications, and erode trust in shared‑resource cloud environments.

Cloudflare responded by rolling out a comprehensive patch across all regions, ensuring that any new containers are provisioned with stricter storage sanitization controls. The firm also advised customers to review recent container deployments and apply the update where needed. In its statement, Cloudflare emphasized that no evidence of active exploitation had been identified and that the company continues to monitor the situation closely.

The episode underscores the ongoing challenge of maintaining robust isolation in shared cloud infrastructures. Security experts note that as more businesses adopt containerized workloads, providers must continuously refine their hygiene processes to prevent data remnants from becoming attack vectors. Cloudflare says it will incorporate additional safeguards and conduct regular audits to reduce the likelihood of similar incidents in the future.