Cloudflare Workers Runtime Flawed: Sandbox Escape via workerd Memory Bugs
Check Point Research uncovered five memory‑corruption bugs in workerd, the shared runtime behind Cloudflare Code Mode and Workers, and chained them into two sandbox‑escape attacks. The flaws let a malicious worker read other tenants’ secrets and even execute native code on the host, compromising the isolation model that secures millions of edge‑served sites.