Cloudflare has patched a vulnerability affecting Cloudflare Containers and Cloudflare Sandboxes, which is built on Containers. Security researcher Oren Yomtov from Accomplish reported the flaw on September 4, 2026, through Cloudflare's HackerOne bug bounty program, and Cloudflare says it has no evidence that customer data has been compromised. 

Cloudflare Containers run each workload inside a dedicated virtual machine powered by the Firecracker VMM, using Linux device mapper thin provisioning to allocate writable root disks. 

The affected storage pools used a 64 KiB thin-block size, and when a thin volume was deleted, its physical blocks returned to a pool shared across multiple customer accounts. With block zeroing disabled, a small write to a reassigned block changed only that portion, leaving the rest able to retain data from the block's previous owner.

The proof of concept performed the following steps:

• Create a container using a Workers Paid account.
• Open the writable root disk at /dev/vdc.
• Read the disk and record a baseline.
• Write one 4 KiB block into each selected 64 KiB region corresponding to ext4 free space.
• Read the resulting blocks again.
• Examine only the portions not overwritten by the new container.

Using a Workers Paid account, researchers demonstrated recovering residual disk blocks previously used by other Containers on the same host. The technique could not target a specific customer, workload, or host, and residual data was not guaranteed to be present. 

Across placements spanning four continents, recovered material included directory structures, database pages, and structurally complete SQLite databases. Researchers did not demonstrate any modification of another customer's active data or impact to workload availability.

Cloudflare applied a fix across the Containers fleet, requiring no customer-side configuration changes, removing the skip_block_zeroing setting, retiring running container disks, and clearing cached image snapshots; cleanup was completed by September 19, 2026. 

“Cloudflare has patched this vulnerability and remediation does not require any further action by Cloudflare customers,” the company advisory said.

After reviewing historical disk-I/O telemetry, the company said it found no evidence of malicious exploitation beyond authorized validation activity from researchers and its own engineers.

In May, CISA warned of a severe CopyFail Linux vulnerability that was under active exploitation (CVE-2026-31431).