Cloudflare Workers AI · First-party API · LLM

CVE-2026-42945

CVE-2026-42945
Release announcedReleased on May 15, 2026

Cloudflare Workers AI released CVE-2026-42945 on May 15, 2026. Source: developers.cloudflare.com · Last checked Oct 29, 2026

Notice

Release announced

Released on May 15, 2026

Cloudflare Workers AI announced this model on 2026-05-15.

Hosting route
First-party API
Affected scope
Not stated in the notice
Announced
May 15, 2026
First seen by ModelClock
Oct 29, 2026

What the provider published

developers.cloudflare.com ↗

This emergency release introduces two new rules to detect nginx heap buffer overflow and heap spray exploitation attempts targeting the rewrite module's is_args stale-state bug (CVE-2026-42945).

Read from the provider's text; the quote is the provider's exact lines.

Also published on developers.cloudflare.com

Revision history

Loading…
Loading revision history…
Raw history JSON

Add a badge to your README

CVE-2026-42945 shutdown date

Shows this model's current status and follows new notices from the provider. Unknown models show “not tracked”, so a README never breaks.

Markdown
[![CVE-2026-42945 shutdown date](https://model-clock.com/badge/cloudflare-workers-ai/CVE-2026-42945.svg)](https://model-clock.com/models/cloudflare-workers-ai/CVE-2026-42945)
HTML
<a href="https://model-clock.com/models/cloudflare-workers-ai/CVE-2026-42945"><img src="https://model-clock.com/badge/cloudflare-workers-ai/CVE-2026-42945.svg" alt="CVE-2026-42945 shutdown date"></a>

Prefer Shields.io styles? Use the endpoint badge with https://model-clock.com/badge/cloudflare-workers-ai/CVE-2026-42945.json.