Privileged-pod chain bypassed tenant isolation in anonymized cloud
A regular tenant reached worker-node root on managed Kubernetes v1.25.16+k0s.0; the provider fixed every reported issue.
6
Stories per day · 30 days
3 RSS
6 stories, newest first · one card per story
Stories tagged #tenant-isolation
Cloudflare GLM-5.3 leaked other customers' data through a KV cache bug
155 responses from August 27 to September 9 mixed in other users' data; Cloudflare found no deliberate exploitation.
1
Cloudflare fixes Containers cross-tenant flaw exposing customer data
Cloudflare fixed a Containers flaw that let Workers Paid customers read residual data from other tenants on the same host.
5
Cloudflare Containers Vulnerability Could Leak Data Between Customer Workloads
Cloudflare patched a Containers flaw that could let one tenant read residual disk data from another.
7
New Cpanel Vulnerability Allows Attackers to Access Other Users’ Accounts
cPanel patched a root privilege escalation and cross-tenant flaws in calendars, contacts, and WordPress databases.
The Illusion of Local Privacy: Confidentiality Boundary Failures in Consumer LLM Serving Systems
Researchers show local LLM serving systems leak prompts via memory residue, plaintext persistence, a llama.cpp tenant-isolation flaw, and timing oracles.