Cloudflare’s Workers Platform Exposed to Spectre-Like Attacks, Leaking Sensitive Data
A worrying vulnerability has been discovered in Cloudflare’s Workers platform, allowing attackers to leak sensitive data from co-located workers through a technique reminiscent of the infamous Spectre attack. The issue, which affects companies using Cloudflare’s platform to manage APIs and microservices, poses a significant risk to data security.
The vulnerability stems from the way Cloudflare’s Workers platform handles Just-In-Time (JIT) compilation, a technology designed to improve performance by compiling code in real-time. However, researchers have found that this process can be exploited by attackers using a technique called ” speculative execution,” similar to Spectre. This allows them to extract sensitive data from co-located workers, including JSON Web Tokens (JWTs), at a rate of 12 bits per second.
The affected companies are likely those that use Cloudflare’s Workers platform to manage APIs and microservices, potentially exposing millions of users’ sensitive information. JWTs, in particular, are a prized target for attackers due to their widespread adoption as authentication tokens across various web applications. Compromised JWTs can grant unauthorized access to systems and data, creating a potential backdoor for cyber attacks.
Cloudflare’s Workers platform is designed to isolate worker functions from each other, preventing code from accessing sensitive data in neighboring workers. However, the vulnerability discovered by researchers undermines this isolation, allowing attackers to bypass these security controls. The issue is particularly concerning given Cloudflare’s widespread adoption among web applications and APIs, making it a significant threat vector for cyber attacks.
The discovery of this vulnerability highlights the ongoing struggle to secure cloud-based platforms against sophisticated attacks. While JIT compilation can improve performance, it also creates new attack surfaces that must be addressed through robust security measures. As companies continue to rely on cloud services, they must remain vigilant and proactive in addressing emerging threats to ensure the integrity of their data.
To mitigate this risk, companies using Cloudflare’s Workers platform should prioritize patching and deploying security updates as soon as possible. Additionally, users should take a closer look at their JWT implementation practices, ensuring that tokens are properly handled and stored securely. By taking these steps, organizations can reduce their exposure to potential cyber attacks and maintain the trust of their customers.
Source: The Hacker News — 2026-08-19