Cloudflare — Cloud, Security product updates and releases, tracked on megachangelog.
AI Search now supports the GLM-5.3 Flash model for text generation, which features a 1,048,576-token context window and runs on Workers AI. Users can configure this model for their AI Search instances.
A hotfix release resolves an issue where a small percentage of DNS queries were failing across platforms.
Fixed a critical issue where the client could fail to connect or switch organizations due to invalid registration after version switches, and resolved DNS query failures affecting a small percentage of queries across platforms.
A new GA release is now available for the Linux Cloudflare One Client. This hotfix resolves an issue where a small but noticeable percentage of DNS queries were failing across platforms.
Durable Objects can now use up to ten distinct Dynamic Workers with in-flight requests, increased from four, enabling better concurrency for shared I/O contexts. Other Workers retain a limit of four distinct Dynamic Workers per request.
Cloudflare has released Z.ai's GLM-5.3 agentic coding model on Workers AI with substantial performance improvements over GLM-5.2, including 50% gains on Z.ai Code Bench and 6x improvements on Terminal Bench 3.0, while maintaining the same pricing of $1.40 per M input tokens and $4.40 per M output tokens.
Radar Researcher now links to relevant Radar pages, reports, and blog posts, and can explain URL Scanner findings with AI. Shared conversations also open in fullscreen while preserving share URLs.
Emergency update to WAF ruleset with enhanced detection for Next.js remote code execution via CVE-2026-75604 on Windows hosts and a new rule for RCE via crafted AVIF images in the Next.js Image Optimizer. Both vulnerabilities affect unauthenticated users.
New Cloudflare Access service token Client Secrets created on or after August 26, 2026 use a scannable format with cfast_ prefix and checksum, making them easier for secret scanning tools to detect with fewer false positives. Existing secrets remain compatible and do not require rotation.
AI Search now supports six additional text generation models on Workers AI, including DeepSeek, GPT-OSS, Qwen, and Kimi models. These models are available for selection when creating or updating AI Search instances without requiring external provider keys.
Cloudflare Log Explorer customers can now permanently delete account and zone datasets from the dashboard or API with built-in deletion protection enabled by default to prevent accidental data loss. Deletion is irreversible and runs asynchronously.
The Z.ai GLM-5.3 Flash multimodal model is now available on Workers AI, offering improved performance over GLM-5.2 at lower cost with support for text and image inputs. It is accessible via the Workers AI binding, REST API, OpenAI-compatible endpoint, and AI Gateway.
You can now create API tokens with access limited to specific Flagship apps instead of all apps in your account. Choose which apps each token can access and set granular permissions (Evaluate, Read, or Write) for improved security in server-side environments like Wrangler, CI, or backend services.
Cloudflare is deprecating the Azure Functions-based Microsoft Sentinel connector due to Microsoft's deprecation of the Azure Monitor HTTP Data Collector API. Customers must migrate to the Cloudflare for Microsoft Sentinel Codeless Connector Framework connector by September 14, 2026.
MCP server portals now support the stateless MCP 2026-07-28 specification for client and upstream server connections, with automatic backward compatibility for earlier 2025 clients and independent protocol selection between clients and servers.
AI Search now supports larger custom metadata values within a shared 10 KiB metadata envelope per vector. The first 64 bytes of each indexed string remain filterable.
Cloudflare Access now supports grace periods during service token secret rotation, allowing both old and new secrets to remain valid for 1 hour to 30 days while administrators update services. The dashboard and API both support custom rotation schedules without interrupting authentication.
Added the retryAlarm option to ctx.abort() so that alarms can be permanently stopped instead of automatically retrying after a Durable Object reset. This is useful for tasks like cleanup operations that should only run once.
API Shield JSON Web Token validation now supports symmetric keys using HS256, HS384, and HS512 algorithms. HMAC verification keys can be configured via the Cloudflare dashboard or API, with credentials never stored in plaintext.
Cloudflare Access administrators can now disable service tokens without deleting them, allowing configuration to be preserved for later re-enablement. This helps contain credential exposure or pause automated services while maintaining the token's settings.
Four new WAF detections including HTTP/2 Request Smuggling and XSS JavaScript Event Handler Coercion are moved from Log to Block mode. The XSS, HTML Injection - Script Tag - Beta rule is merged into the original rule, and a new Generic Rules - Remote Code Execution detection is added in Block mode.
You can now select your hypervisor and download the Cloudflare One Virtual Appliance directly from the dashboard, supporting VMware ESXi, Proxmox, and libvirt/KVM without having to manually look up asset URLs.
Cloudflare Radar now includes an ASPA validation tool in its Routing section that verifies BGP AS_PATHs against Autonomous System Provider Authorization records, detecting route leaks and validating paths using draft-ietf-sidrops-aspa-verification standards. The tool loads ASPA snapshots locally in the browser and supports both upstream and downstream verification algorithms with visual path analysis.
Wrangler and the Cloudflare API MCP server now support optional OAuth scopes, allowing you to selectively grant permissions during authorization rather than approving all requested scopes. You can customize permissions in the consent dialog while required scopes remain mandatory.
Cloudflare Dashboard users can now save up to five login profiles on a device, storing email, login method, and preferences locally for faster sign-in on future visits. Saved profiles appear on the login page and can be removed anytime.
Dashboard SCIM now supports replacing groups using HTTP PUT, allowing identity providers to synchronize a group's full state including display name, external ID, and members in a single request. This improves compatibility with identity providers using replacement semantics.
Cloudflare CASB now supports automatic remediation policies that can directly fix security findings in Microsoft 365 and Google Workspace, or send webhooks to external systems like Slack and ServiceNow. Remediation actions execute without manual intervention when policies trigger on file-sharing misconfigurations.
Cloudflare Web Analytics now provides improved soft navigation measurement for SPAs by leveraging Chrome's native Soft Navigation API, which natively measures Largest Contentful Paint (LCP) on soft navigations. Navigation types have been extended to distinguish between hard navigations, soft navigations, and routing API-based navigations, which may alter reported pageview volumes depending on your front-end architecture.
Test scan lets you evaluate Data Loss Prevention profiles on sample content before deploying to production, by pasting text, uploading files, or HAR files directly to the DLP scanner without routing through Gateway.
Cloudflare API 403 Forbidden responses now include a documentation_url field that links directly to the relevant endpoint documentation and required roles, enabling faster troubleshooting and better support for automated agents.
Cloudflare added two new Logpush datasets—Account Abuse Protection Events and Magic BGP Logs—and expanded existing datasets with additional fields including AI security categories, WAF signature data, and TLS exchange information.
Cloudflare added a new ClientTLSKeyExchangeGroup field to the http_requests Logpush dataset and Log Explorer, allowing customers to see what percentage of their traffic uses post-quantum key agreement. This enables building per-zone reports and breaking down adoption by hostname, path, user agent, or country.
Cloudflare now allows OAuth client developers to mark configured scopes as required or optional, enabling users to selectively grant permissions and apply least-privilege access controls. The consent screen includes new templates and search functionality to make scope selection easier.
Durable Object namespaces now have a Deployments tab in the dashboard showing live Worker versions, traffic splits, and actual vs. configured traffic percentages. The tab displays metrics like requests, error rate, and wall time per version, making it easier to monitor gradual deployments without navigating to the backing Worker.
Leaked credentials detection now automatically scans the Authorization header for Basic Authentication credentials, expanding coverage beyond request bodies and query strings. Credentials are compared against Cloudflare's leaked credentials database and populate existing WAF fields without requiring configuration changes.
Workers Paid plan customers now have higher default limits for Browser Run: concurrent browsers increased from 120 to 200, new browser instances per second from 1 to 3, and Quick Actions requests per second from 10 to 30. This enables faster parallel browser session execution and higher throughput for automation tasks.
Miniflare now automatically grants local Containers the Docker privileges required for Filesystem in Userspace (FUSE) during development with wrangler dev, the Vite plugin, and direct Miniflare use. FUSE support is available for Docker on macOS, Windows Subsystem for Linux, and rootless Docker on Linux when /dev/fuse is available.
GA release introducing improved reauthentication notifications and HTTP fallback optimization for networks with limited HTTP/3 support. Includes multiple bug fixes for GUI resource leaks, organization switching, Defender compatibility, and display rendering issues.
New stable release for macOS with improved reauthentication flow, adaptive HTTP fallback for better connectivity on restrictive networks, and multiple bug fixes including login issues, DNS parsing, status display, and crash fixes.
General availability release of Cloudflare One Client for Linux with improved reauthentication notifications, adaptive HTTP fallback for restrictive networks, and multiple bug fixes for login, DNS resolution, connection status display, and mesh routing.
GPT-5.6 Sol is now available via Cloudflare's AI Gateway with a 50% promotional discount on input, output, and cache read tokens for Unified Billing users through September 18, 2026.
The Workers Vitest integration package has been renamed from @cloudflare/vitest-pool-workers to @cloudflare/vitest-plugin. Existing projects must update the dependency name and imports, with automated migration available via codemod.
Members with resource-scoped Access roles can now view and list Access resources in the dashboard and API, with filtering applied to show only resources within their permission scopes. Previously these members needed an additional account-scoped role to access list pages.
You can now configure origin application settings directly in the Cloudflare dashboard when adding or editing a published application route for Cloudflare Tunnel. Previously, these settings were only available in the Cloudflare One dashboard or via local configuration files.
Cloudflare Email Security now supports post-quantum hybrid key exchange with X25519MLKEM768 on SMTP connections, protecting email traffic against harvest-now, decrypt-later attacks. The feature is backwards compatible and automatically enabled for all customers across all Email Security packages.
Alibaba's Qwen 3.8 27B vision language model is now available on Workers AI, supporting image and text inputs with reasoning, function calling, and a 262K token context window for building intelligent agents.
Load balancing analytics filters now query by pool name instead of internal pool ID, matching what is displayed in the UI dropdown. This fixes filtering behavior for pools with similar names and ensures displayed data correctly corresponds to the selected pool across all analytics charts, tables, and metrics.
Updated WAF rule metadata in Cloudflare Managed Ruleset and Free Ruleset to identify CVE-2026-65640, a remote code execution vulnerability in WordPress. Rule detection and blocking behavior remain unchanged; only metadata descriptions were refined.
R2 now supports a US jurisdiction option that guarantees bucket data is stored and processed within the United States, available via a jurisdiction-specific S3 endpoint and configurable in Workers R2 bindings.
Fixed an issue where HTTP Traffic Analytics and HTTP request logs were underreporting data transferred during WebSocket connections by only counting the initial handshake. Customers will now see accurate Data Transfer metrics in the dashboard and EdgeResponseBytes in analytics logs.
DeepSeek V4 Flash and V4 Pro models are now available on Workers AI, featuring a full 1 million token context window for long-horizon agentic workflows. Both models support reasoning, function calling, and are accessible via Workers AI binding, REST API, OpenAI-compatible endpoint, or AI Gateway.
Cloudflare Access can now be attached directly to Workers, protecting all associated domains and preview URLs automatically. You can enable Access on individual Workers or make all Workers private by default, with the option to bypass specific Workers for public access.
Certificate Transparency Monitoring is now generally available across all Cloudflare plans with automatic filtering of Cloudflare-issued certificates and improved alert emails with clearer details and dashboard links for easier management.
Cloud Connector now supports routing requests to public Oracle Cloud Infrastructure Object Storage buckets using the S3 Compatibility API, with support for both path-style and virtual-hosted endpoint formats. This eliminates the need for separate origin-routing configuration when integrating with OCI.
Artifacts now supports jurisdictions, allowing you to select the European Union or the United States as the only location where repo data is stored and processed. Select a jurisdiction when you create a namespace and every repo in that namespace automatically uses the selected jurisdiction.
Cloudflare Gateway now detects software package downloads across multiple ecosystems (npm, PyPI, RubyGems, Cargo, Go, Maven, NuGet) and lets you write HTTP policies to allow or block them using package-specific selectors like ecosystem, name, version, and namespace. This enables supply chain security control for developers and CI/CD pipelines.
Realtime SFU DataChannels now support unordered and partially reliable delivery modes alongside the default reliable and ordered behavior. Applications can configure delivery settings to match payload requirements, choosing between full reliability, unordered delivery, or time/retry-bounded options for use cases like game state, sensor updates, and chat.
Cloudflare Email Security now lets administrators create custom content-based blocking rules using plaintext strings or regular expressions to stop targeted phishing, known-bad phrases, and organization-specific content patterns. Rules can scan the message subject, body, or both, with built-in regex validation and automatic blocking of matching emails.
Infrastructure applications now support independent multi-factor authentication using FIDO2 keys for SSH access. Users can enroll FIDO2 keys through the App Launcher and configure them at both application and policy levels.
Gateway HTTP and Network policies now include a Traffic Source selector that identifies how traffic reaches Cloudflare, allowing administrators to write policies targeting specific on-ramp methods like the Cloudflare One Client, Mesh connectors, MCP portals, and proxy endpoints. A new Browser Isolation selector is also available to apply different policy behavior to isolated traffic.
Cloudflare Gateway now automatically detects Model Context Protocol (MCP) traffic and includes a new experimental MCP selector for HTTP policies to allow, block, or isolate MCP requests. A new AI security report dashboard provides visibility into MCP usage, including request volume, unique users, MCP servers, and policy targeting data.
Hostname routing is now GA, allowing you to route traffic by hostname across Cloudflare One connectors instead of managing static IP lists. The default IP range for initial resolved IPs is changing from a CGNAT range to Cloudflare's public range (172.64.128.0/20 for IPv4) to address Chrome 142's Local Network Access restrictions that were blocking background requests.
Cloudflare WAF now protects against vBulletin CVE-2026-61511 remote code execution vulnerability with a new detection rule. Two existing detections for version control information disclosure and vBulletin code injection have been improved and merged into their base rules for stronger coverage.
The Cloudflare Status page has been rebuilt while maintaining all existing APIs and bookmarks. It now includes independent notifications via email, webhook, Slack, Discord, and Google Chat that work even during Cloudflare outages, Markdown support for AI agents, and separate RSS/Atom feeds for incidents and maintenance.
Pages automatically skips a queued build when a newer build for the same project, branch, and deployment target is also queued, improving build queue efficiency.
This hotfix resolves an uncommon intermittent issue on Windows devices where the client failed to reconnect after the device woke from sleep.
Real-time tunnel log streaming is now available in the Cloudflare dashboard, allowing you to stream logs from single or multiple connectors with filtering by log level, event type, and HTTP method. This brings live debugging previously only available in Cloudflare One dashboard to the main dashboard interface.
Turnstile Spin is now generally available with three setup paths for creating and deploying Turnstile widgets. Users can set up via the dashboard, Wrangler CLI, or AI coding agents, with automated server-side siteverify integration and validation checks.
Load Balancing health notifications are now stateful and automatically resolve incidents in alerting tools when a pool or endpoint recovers. Recovery notifications are now sent alongside failure notifications and matched to original alerts without requiring manual closure.
Cloudflare Radar now includes Radar Researcher, an AI-powered assistant for exploring Internet trends and traffic data through voice or text queries with interactive charts. Additionally, Radar now supports WebMCP, enabling browser-based AI agents to navigate Radar data and use tools like URL scanning and domain lookup.
Cloudflare Mesh now runs as a Docker container image on Docker Hub, supporting Docker Compose, Kubernetes, and OCI-compatible runtimes with amd64 and arm64 architecture support. Built-in source NAT eliminates the need for VPC route table changes, and deployments can span Docker Compose, Kubernetes StatefulSets, sidecars, and CI/CD pipelines with automatic failover support.
Sandbox SDK 1.0 is now available for preview under the npm @next tag, featuring a simplified API with unified execution interface, RPC-only transport, improved terminal support, and modular code interpreter. The stable 0.12.x release continues to be supported for existing applications.
Workers AI and AI Gateway now provide a unified interface for accessing both first-party and third-party AI models with shared bindings, REST APIs, and consolidated billing through prepaid credits. This enables centralized observability, logging, caching, and rate limiting across all model providers.
Hyperdrive now provides general availability support for MySQL databases, allowing you to connect to any MySQL database from Cloudflare Workers with optimized connection pooling, caching, and no code changes required for existing drivers and ORMs.
Hyperdrive configurations can now be restarted from the Cloudflare dashboard to drain the connection pool and force new connections to your origin database. This manual action is available as a break-glass recovery option when automatic failover detection is insufficient.
Updated WordPress XSS rule metadata in the Managed and Free Rulesets to identify CVE-2026-64638, a pre-authentication reflected cross-site scripting vulnerability on WordPress login screens. Also disabled the Command Injection - Obfuscation rule as its detection logic has been deprecated.
Cloudflare Radar now includes two new widgets on AS pages showing how networks reach the Internet through Tier-1 providers: an AS-level connectivity graph displaying BGP paths and an Upstream providers chart tracking path shares over time. Both are backed by new BGP API endpoints for programmatic access to this routing data.
Cloudflare launches Kitesurf, a new stateless browser for Browser Run optimized for AI agents that uses 3–7× less CPU and memory than Chromium. It is available free in beta and can be enabled by adding the browser=kitesurf parameter to Browser Run endpoints.
AI Search now supports serving search endpoints from your own domain, restricting access with Cloudflare Access authentication, querying multiple instances from a single namespace URL, and discovering website content through link crawling without requiring a complete sitemap.
AI Gateway now includes User Insights, a dashboard providing visibility into AI spending costs, requests, tokens, and adoption while also detecting anomalous user behavior that may indicate compromised credentials or misbehaving agents. The feature requires no additional setup and is available to all AI Gateway customers at no cost.
OAuth consent screens now display shield icons with explanatory text that indicate who owns the application and whether its domain ownership is verified, helping users identify trusted applications more easily.
AI Gateway now integrates with Cloudflare Access to provide identity-aware controls, allowing you to protect gateway endpoints with Access policies and use authenticated user identity for logs, analytics, routing, and spend controls. Users can set per-user spend limits, control gateway access by user, and filter logs by identity.
Agent tracing is now available for applications built with the Agents SDK, showing each agent turn with model calls, tool runs, approvals, token usage, and Workers runtime operations. Developers can enable tracing via Wrangler configuration and wrap the AI SDK to automatically capture and inspect traces in the Cloudflare dashboard.
New WAF rules added for Microsoft SharePoint RCE (CVE-2026-50522) and Rails RCE (CVE-2026-66066) vulnerabilities. Enhanced SSRF cloud protection rules with improved detection logic and updated rule actions including new block behaviors.
wrangler login now supports OAuth 2.0 Device Authorization Grant via the --device flag, allowing authentication without a local callback server. This eliminates the need for port forwarding or manual callback handling in containers, SSH sessions, and other restricted environments.
Workers now enable Node.js compatibility flags by default for compatibility dates of 2026-08-04 or later, making all Node.js built-in APIs available without additional configuration. Existing projects using earlier compatibility dates are unaffected and can opt in manually.
Vectorize index capacity has doubled from 10 million to 20 million vectors, enabling larger-scale semantic search, recommendation systems, and RAG applications without requiring data to be split across multiple indexes.
Cloudflare Workers now automatically capture structured OpenTelemetry traces and console logs during local development. AI agents can use the Local Explorer API to identify failing operations, fix code, and verify results without deployment, while developers can inspect traces and logs in a browser UI.
Cloudflare users can now create standalone Free accounts directly from the dashboard using a new Create Account button, with support for up to 5 Free accounts per user after 7 days of tenure.
You can now run CI/CD pipelines on Artifacts repos with automatic triggering on push events using the CI SDK. This enables automated building, testing, linting, and deployment to Workers with dependency caching based on lockfile changes.
Cloudflare Access now lets administrators control whether authorization cookies are set eagerly across all hostnames or issued only when users visit each one. This new setting is on by default for new applications and helps prevent sign-in loops in browsers with many hostnames.
Load balancing analytics now distinguishes traffic served by fallback pools from traffic routed by normal steering policies, making it easier to identify when Cloudflare has fallen back to the pool of last resort during outages. Fallback traffic is labeled with the pool name followed by "(Fallback)" and appears as separate entries in requests over time, pool distribution, and top endpoints views.
Workers RPC now enables cross-language method calls between Python and JavaScript Workers using Service bindings, with automatic type conversion and exception propagation. No additional dependencies, schemas, or serialization code is required.
Cloudflare released an early preview of @cloudflare/computer, an open-source agent runtime that provides agents with dynamic compute orchestration between efficient isolates and full Linux containers, plus a virtual filesystem backed by SQLite for file operations and shell command execution.
Billing for R2 SQL is now active on non-enterprise accounts, charging $0.0025 per GB of compressed data scanned, with 10 GB included monthly. All R2 SQL usage beyond the free tier will appear on invoices starting immediately.
Billing is now active for R2 Data Catalog on non-enterprise accounts, with charges based on catalog operations, compaction data processed, and compaction objects. Each dimension includes a free tier, and usage beyond the included amounts will appear on your next invoice.
Billing for Cloudflare Pipelines is now active on non-enterprise accounts. Usage beyond the free tier is billed based on SQL transforms ($0.04/GB) and sinks ($0.03–$0.06/GB depending on output format), with 50 GB/month included for paid Workers plans.
This beta release improves connection reliability through protocol swapping, fixes certificate display errors, DNS parsing issues, MASQUE tunnel stalling, and organization switching problems. Multiple UI crashes, IPv6 multicast routing, Windows 10 compatibility, and credential cleanup issues have also been resolved.
Beta release with improved connection reliability, DNS handling, and multiple bug fixes for the macOS Cloudflare One Client. Includes MASQUE tunnel stability improvements, certificate error fixes, and better support for configurations with many DNS fallback resolvers.
Browser Run now includes a Playground in the Cloudflare dashboard where you can test Quick Actions against a live browser without creating a Worker or deploying code. The Playground lets you test URLs, tune viewport settings, preview outputs, and generate working code in cURL, TypeScript SDK, Python, or Workers Binding format.
97 more changes from Cloudflare. Sign up to read the whole changelog.
Sign up freeGitHub or email — no card needed.