Cloudflare — Cloud, Security product updates and releases, tracked on megachangelog.
Workers can now call Workflows declared in their Wrangler configuration exports field through ctx.exports, eliminating the need for a separate workflows binding. Workflows are keyed by class name and share the same API as bindings, with local development support via Wrangler, Vite, and Vitest plugins.
Workers now support additional OpenTelemetry span APIs including getActiveSpan(), recordException(), startSpan(), and setAttributes() for more granular instrumentation and error tracking on custom spans.
Cloudflare Advanced Network Firewall Managed Rulesets are now available for accounts using Unified Routing mode, expanding feature support across Magic Transit and Cloudflare WAN deployments.
Browser Run crawl jobs can now publish lifecycle events (started, updated, finished) to Cloudflare Queues, allowing you to track progress and trigger downstream processing without polling.
Cloudflare's Web Application Firewall has added new managed rules to block critical vulnerabilities in WordPress (path traversal, LFI, XSS) and JFrog Artifactory (authentication bypass). Administrators should apply vendor patches to fully secure their origin servers.
Workers Metrics charts now display every release and the full progression of gradual deployments, making it easier to correlate performance changes like memory, CPU, errors, or latency with code versions. Hover over rollouts to see version details, duration, and traffic percentage at each step.
Email Sending suppressions now support domain-level scope in addition to account-level scope, allowing you to manage bounce and complaint suppressions per sending domain. This prevents issues with one domain from affecting suppressions across your entire account, with automatic creation of domain-level suppressions and API support for specifying scope.
MCP server portals are now generally available to all Cloudflare customers, providing a single endpoint for approved Model Context Protocol servers with activity logging. The feature now includes gateway routing for HTTP logging and DLP scanning, Code Mode policies for tool optimization, static OAuth credentials, session management, service token authentication for machine-to-machine access, and Logpush support for SIEM integration.
1.1.1.1 resolver now supports RFC 8509 root key trust anchor sentinels, allowing you to verify whether the resolver trusts a specific DNSSEC root key ahead of a key rollover. This enables testing for DNSSEC root key readiness using special sentinel domain queries.
R2 now provides product-level bandwidth usage metrics accessible via the Cloudflare dashboard and GraphQL Analytics API, allowing users to monitor upload and download throughput across all buckets or individually per bucket.
Workers can now declare Workflows directly in the exports field of the Wrangler configuration file, eliminating the need for a workflows binding when the Worker doesn't call the Workflow itself. This enables cleaner configuration and automatic Workflow creation or updates during deployment.
Durable Object name searches in the Cloudflare dashboard now accept up to 128 characters instead of 20, with search results and recent invocation lists displaying up to 128 characters before truncation. This applies to the object filter on the Metrics tab and object search in Data Studio.
Gateway HTTP and Network policies now support a Traffic Destination selector that identifies how traffic exits Cloudflare, enabling administrators to write policies targeting specific off-ramp methods like public Internet, Cloudflare Tunnel, WAN, or Mesh.
Users can now view account-level analytics for Images transformation usage, including request breakdowns by source type, top zones, configurations, origins, and Worker scripts. This helps identify which zones and configurations generate the most image transformation requests.
Cloudflare Mesh now includes guided onboarding in the dashboard to simplify adding and managing Mesh nodes and client devices. The updated interface provides deployment options for multiple container platforms, platform-specific installation guidance, and a unified table to manage all participants.
Workers Builds now integrates with Cursor Origin repositories, enabling automatic building and deployment of production changes, preview generation for non-production branches, and build status visibility in pull requests.
The WAF now includes new detections for Server-Side Request Forgery attacks using non-standard IP notations and jar loopback payloads, plus defenses against Server-Side Template Injection targeting Jinja environments.
Cloudflare Access administrators can now automatically disable or delete inactive service tokens by setting an inactivity period from 30 to 365 days. Cleanup runs gradually in the background for tokens that are older than the configured period and have not authenticated during that time.
The concat() function in Cloudflare Rules now accepts up to 32 arguments instead of 16, enabling you to combine more request data directly in Rules expressions and simplify configurations that add dynamic headers and values to requests.
Worker Previews let you test each change in an isolated, production-like environment with its own code, configuration, URL, and observability. Each Preview gets a stable URL that updates with every push, full observability including logs and metrics, and can use production-like hostnames on custom domains for testing authentication and integrations before deploying to production.
MCP server portals can now connect to private MCP servers on your network via Cloudflare Gateway without exposing them publicly. Set up a connection using Cloudflare Tunnel or Mesh, configure a private hostname or CIDR route, and enable Gateway traffic routing.
Beta release featuring multiple bug fixes and reliability improvements for the Cloudflare One Client on macOS, including enhancements to split tunnel handling, reauthentication, DNS reliability, and network connectivity checks.
Beta release includes multiple fixes and improvements for traffic blocking, reauthentication, network reliability, DNS performance, and UI stability. Key improvements include better MTU handling, expanded LAN routing support, and removal of WLAN AutoConfig dependency.
You can now invite teammates directly from the Workers dashboard and grant them scoped access levels (Metadata Read-Only, Content Read-Only, Editor, or Admin) to specific Workers. Super Administrators can manage these invitations with automatic account integration for existing members.
Browser Run now provides typed methods for session management and DevTools operations, including acquire, launch, and connectSession methods with support for outbound routing through Workers. You can manage sessions, create Live View URLs, and perform target operations without manual HTTP requests.
Logpush jobs can now exclude distributed denial-of-service attack traffic from delivered logs, reducing noise and focusing on legitimate traffic. This feature supports http_requests, firewall_events, and network_analytics_logs datasets via a new filter_attack_traffic flag.
Browser Run Session Recordings now include an Inspect panel with Logs, Network, and DOM tabs, allowing you to search console output, view detailed network requests with HAR export, inspect page structure, and access recorded data via API without reproducing sessions.
Unified Routing is now generally available for Cloudflare WAN and Magic Transit, improving integration between Cloudflare One and standard connectivity onramps. It supports new features including Automatic Return Routing, BGP, and custom client subnets.
Cloudflare will stop publishing cloudflared releases for 32-bit Windows and Intel-based macOS starting in 2027, aligning with end-of-support timelines for Windows 10 and Intel Macs.
You can now delete one or up to 100 Workflow instances and their stored state via the Workflows API or Wrangler 4.125.0 and later. Deleting an instance frees its stored state, stops execution, and reduces storage billing.
Cloudflare now allows customers to create additional Free accounts via self-serve dashboard flows, programmatically through API tokens or OAuth, and directly within Enterprise Organizations. Super Administrators can provision up to five Free accounts per Organization for easier account management.
Cloudflare Rules now validates ruleset changes before deployment, catching invalid expressions, action parameters, permission issues, and quota limit violations. The dashboard performs validation automatically, and the Rulesets API supports dry_run=true queries to validate changes without persisting them.
Added rejectIfBusy option for Workers AI inference requests, allowing applications to fail immediately instead of waiting in the capacity queue when resources are unavailable. This option can be passed to both the Workers AI binding and the REST API.
Workers traces can now follow JavaScript RPC calls across Worker boundaries and into Durable Objects, showing caller-side sessions, method invocations, and nested calls. Enable tracing via a single Wrangler configuration setting without code changes.
Python Workers can now connect to PostgreSQL and MySQL databases through Hyperdrive, enabling serverless database connectivity from Python-based applications.
R2 Data Catalog now provides table-level maintenance visibility and manual compaction queueing in the Cloudflare dashboard. Users can view maintenance schedules, recent operation details, and request maintenance directly from the table view without navigating away.
Workflow instances now support event streaming through WorkflowInstance.subscribe() and the GET /subscribe API endpoint, allowing Workers and HTTP clients to react to workflow events like attempts, sleeps, waits, and rollbacks without polling. Subscriptions stream the complete event history first, then wait for new events in real-time, with optional filtering by event type or cursor position.
Cloudflare Workers now supports granular, role-based access control, allowing you to grant teammates, agents, and CI/CD workflows access to specific Workers with four configurable roles: Metadata Read-Only, Content Read-Only, Editor, and Admin. These permissions can be configured via the Cloudflare dashboard, API, or Terraform.
Cloudflare WAF introduces new threat detections to enhance protection against command injection attempts, Server-Side Request Forgery targeting cloud metadata, and information disclosure vulnerabilities in version control history.
Access for Infrastructure now integrates with Resource Tagging, allowing you to attach key-value tags to infrastructure targets and use them in access policies with flexible target criteria operators (include, require, exclude) that match by hostname, tag, or both.
Cloudflare Data Loss Prevention now includes Passive Detection, which analyzes sampled Gateway traffic to identify sensitive data types and their destinations before you create blocking policies. This helps you understand your organization's data flows and build effective DLP policies without requiring an existing policy.
Cloudflare Access now supports requiring fresh authentication from SAML identity providers on every login. Users can enable this via the dashboard or set force_authn to true in the API to enforce reauthentication instead of relying on cached identity provider sessions.
Cloudflare now displays warnings for shadowed DNS records across all zones, helping identify records that may not resolve as expected. Shadow metadata is also available via the DNS records API with the include_shadow_metadata parameter to identify delegating NS records and glue records.
AI Gateway now supports requiring provider credentials for third-party requests, preventing automatic fallback to Cloudflare-managed Unified Billing credentials. You can enforce this at the gateway level or per-request using the byok_only setting or cf-aig-no-wholesale header.
Browser Run now supports guardrails to limit HTTP and HTTPS requests to permitted hostnames, enabling secure browser workflows for specific websites and third-party APIs. Additionally, Live View now supports read-only mode for observing sessions without interaction.
The @cloudflare/voice package now provides detailed per-turn metrics showing where each voice agent turn spends time and how it ends, with typed summaries including outcomes, latency breakdowns for speech-to-text, model inference, text-to-speech stages, and new browser console diagnostics for local debugging.
AI Search can now index R2 objects without filename extensions when they include supported Content-Type metadata, enabling file-type validation for object keys without file extensions.
New Workflows on the Workers Paid plan now retain completed and errored instance state for 7 days by default instead of 30 days, helping reduce storage costs while maintaining a maximum retention limit of 30 days. Existing Workflows are unaffected, and users can customize retention periods using the successRetention and errorRetention options.
Cloudflare Containers can now serve as the execution environment for the OpenAI Agents API, allowing applications to run Codex with self-hosted infrastructure. An open-source Workers template is available as a reference implementation with built-in session management and automatic lifecycle handling.
Cloudflare WAF now blocks a critical zero-day RCE vulnerability (CVE-2026-75650) targeting Adobe Commerce and Magento storefronts. This emergency virtual patch provides immediate edge-level defense against unauthenticated attackers injecting PHP payloads through style properties, though urgent patching and credential rotation on origin applications are required.
A new beta release for macOS Cloudflare One Client with improvements to DNS reliability, API resilience, and WARP tunnel routing support, plus multiple bug fixes for connectivity, diagnostics, and UI stability.
Beta release includes routing improvements for non-RFC 1918 networks, enhanced DNS reliability on low-MTU connections, improved API retry logic, and numerous stability fixes including fixes for captive portal checks, WireGuard protocol switching, DEX HTTP validation, and UI crashes.
AI Gateway custom costs now support per_cache_read_token and per_cache_write_token rates via the cf-aig-custom-cost header, allowing custom cost metrics to reflect negotiated cache pricing across different providers. The system automatically handles provider differences and prevents double-counting of cache tokens.
Cloudflare CASB now offers native integration with Zoom to continuously scan for security misconfigurations, including weak password policies, unprotected meetings, insecure user accounts, and publicly accessible recordings. The integration uses pre-built OAuth and requires no manual setup, delivering findings in the Cloudflare One dashboard within minutes.
Browser Isolation now displays tap-to-type prompts inline over text fields on iOS instead of full-screen overlays, reducing disruption during text entry. If space is limited, a keyboard icon appears instead.
Cloudflare WAF enhanced its detection logic for Next.js remote code execution vulnerabilities by consolidating active beta rules into baseline signatures. Two beta rules targeting Next.js Image Optimizer RCE and CVE-2026-75604 are now merged into their respective primary rules with logging behavior upgraded to blocking.
Python workers now use Python 3.14 by default for all new workers with compatibility date 2026-09-08 or later, with the Pyodide runtime updated to 314.0.6.
Miniflare v5 introduces a new configuration shape aligned with cloudflare.config.ts and removes deprecated APIs, legacy D1 bindings, and internal APIs to prepare the local development tooling for the upcoming cf CLI. Most projects using wrangler dev or the Vite plugin will not require action.
Cloudflare Radar search now includes Internet events and outages in search results, with the ability to filter by event descriptions, locations, ASes, bots, and domains. Event links preserve date ranges for easier investigation, and results are also available to browser-based AI agents through WebMCP.
Application Profiles introduce positive-security to Cloudflare WAF by learning what valid requests to your application look like and flagging traffic that deviates from expected structures. Schema Profiles learn path variables, query parameters, headers, cookies, and request bodies with field type validation, and can be enforced via custom rules after review in Security Analytics.
Wrangler 4.113.0 and later can now manage Email Routing rules directly through configuration, allowing you to define literal recipient addresses or apex-domain catch-all patterns without manual setup.
You can now configure Email Routing rules directly in your Wrangler configuration file to route emails to Workers. Wrangler will automatically create, update, and remove rules when you deploy, with confirmation prompts for destructive changes.
Enterprise customers can now configure CDN maximum upload size up to 5 GB directly from the Cloudflare dashboard, eliminating the need to contact support for request bodies between 500 MB and 5 GB. The default remains 500 MB, with limits above 5 GB still requiring account team assistance.
Cloudflare removed compressed size limits for Workers and now only enforces a 64 MiB uncompressed size limit across free and paid plans, allowing developers to deploy larger dependencies and frameworks without restrictions.
R2 Data Access Logs are now generally available, allowing you to record object read, write, list, multipart upload, and delete operations across S3-compatible API, Cloudflare API, dashboard, Workers bindings, and public buckets. Logs are viewable in Workers Observability with filtering capabilities.
Users can now configure custom DHCP options directly from the Cloudflare dashboard when the One Appliance acts as a DHCP server, with support for common options like PXE boot, VoIP provisioning, and vendor-specific configurations, complementing existing API and Terraform workflows.
You can now create multiple Cloudflare Tunnel and Cloudflare Mesh routes in a single action from the Routes page, including support for comma-separated destinations, batching, and retry-only-failed functionality.
You can now create, edit, and delete custom applications for traffic breakout and prioritization directly from the Cloudflare One Appliance dashboard without using the API. Custom applications can be matched by hostnames, IP subnets, and the new source subnets field for matching by source IP range.
Cloudflare Images now supports text rasterization to render text into images with customizable styling, metadata filtering to manage hosted images, server-side signing for private image URLs, and direct creator uploads. The Images binding also adds header management and improved caching options.
The Rulesets API now supports Origin Range Requests in Cache Rules, allowing Cloudflare to fetch large files from your origin in cache-aligned byte ranges. You can set origin_range_requests.mode to on, off, or default to control this behavior for any traffic matched by a Cache Rule.
Cursor self-hosted machines now enable running Cursor Cloud Agents on Cloudflare infrastructure, with agent execution isolated in containers and tools running in your controlled environment. An open-source Workers template simplifies deployment with all necessary resources including Durable Objects, R2 buckets, and cron triggers.
Python Workers now support WSGI and ASGI web frameworks, enabling you to use popular frameworks like Django, Flask, FastAPI, and Starlette. You can use the wsgi.entrypoint or asgi.entrypoint utilities to integrate these frameworks with your Workers applications.
Cloudflare WAF now includes enhanced protection against SQL injection attempts that exploit complex query syntax, specifically covering WHERE comparisons combined with WITH clauses. This new detection rule blocks these attacks by default.
AI Gateway monthly usage invoices now consolidate input and output tokens into a single line item per model, and model names have been standardized to use a consistent provider/model identifier format across invoices and logs.
Starting September 1, 2026, D1 queries on the Workers Free plan will fail when exceeding daily row read or write limits, returning errors until the limit resets at midnight UTC. Users can upgrade to a paid plan or optimize queries by adding indexes and reviewing full table scans to reduce row reads.
The /crawl endpoint now respects the use directive from the Content Signals standard, allowing site owners to control how their content may be used. A new contentUse parameter lets you declare your intended usage level (reference or full), and requests are rejected if they exceed a target site's robots.txt restrictions.
Load Balancing now supports pool sets via API, enabling geographic matching with location-specific traffic steering. One load balancer can use different routing behavior and steering policies for different geographic locations, countries, or regions.
AI Search now supports the GLM-5.3 Flash model for text generation, which features a 1,048,576-token context window and runs on Workers AI. Users can configure this model for their AI Search instances.
A hotfix release resolves an issue where a small percentage of DNS queries were failing across platforms.
Fixed a critical issue where the client could fail to connect or switch organizations due to invalid registration after version switches, and resolved DNS query failures affecting a small percentage of queries across platforms.
A new GA release is now available for the Linux Cloudflare One Client. This hotfix resolves an issue where a small but noticeable percentage of DNS queries were failing across platforms.
Cloudflare has released Z.ai's GLM-5.3 agentic coding model on Workers AI with substantial performance improvements over GLM-5.2, including 50% gains on Z.ai Code Bench and 6x improvements on Terminal Bench 3.0, while maintaining the same pricing of $1.40 per M input tokens and $4.40 per M output tokens.
Log Explorer now offers a refreshed dataset configuration experience with grouped field selection, field details showing data types and requirements, bulk controls for field selection, and ingestion filters to control which events are ingested.
Durable Objects can now use up to ten distinct Dynamic Workers with in-flight requests, increased from four, enabling better concurrency for shared I/O contexts. Other Workers retain a limit of four distinct Dynamic Workers per request.
Fixed a regression in Automatic Platform Optimization that prevented caching of HTML requests without explicit Accept: text/html headers, commonly from crawlers, bots, and monitors. These requests are now cached properly without requiring workarounds.
API Shield now supports 32 token configurations per zone (up from previous limits), with each configuration supporting up to 16 keys. This expansion enables more JWT configurations and facilitates better key rotation practices.
Emergency update to WAF ruleset with enhanced detection for Next.js remote code execution via CVE-2026-75604 on Windows hosts and a new rule for RCE via crafted AVIF images in the Next.js Image Optimizer. Both vulnerabilities affect unauthenticated users.
You can now create API tokens with access limited to specific Flagship apps instead of all apps in your account. Choose which apps each token can access and set granular permissions (Evaluate, Read, or Write) for improved security in server-side environments like Wrangler, CI, or backend services.
Radar Researcher now links to relevant Radar pages, reports, and blog posts, and can explain URL Scanner findings with AI. Shared conversations also open in fullscreen while preserving share URLs.
The Z.ai GLM-5.3 Flash multimodal model is now available on Workers AI, offering improved performance over GLM-5.2 at lower cost with support for text and image inputs. It is accessible via the Workers AI binding, REST API, OpenAI-compatible endpoint, and AI Gateway.
Cloudflare Log Explorer customers can now permanently delete account and zone datasets from the dashboard or API with built-in deletion protection enabled by default to prevent accidental data loss. Deletion is irreversible and runs asynchronously.
AI Search now supports six additional text generation models on Workers AI, including DeepSeek, GPT-OSS, Qwen, and Kimi models. These models are available for selection when creating or updating AI Search instances without requiring external provider keys.
Cloudflare is deprecating the Azure Functions-based Microsoft Sentinel connector due to Microsoft's deprecation of the Azure Monitor HTTP Data Collector API. Customers must migrate to the Cloudflare for Microsoft Sentinel Codeless Connector Framework connector by September 14, 2026.
New Cloudflare Access service token Client Secrets created on or after August 26, 2026 use a scannable format with cfast_ prefix and checksum, making them easier for secret scanning tools to detect with fewer false positives. Existing secrets remain compatible and do not require rotation.
API Shield JSON Web Token validation now supports symmetric keys using HS256, HS384, and HS512 algorithms. HMAC verification keys can be configured via the Cloudflare dashboard or API, with credentials never stored in plaintext.
Cloudflare Access administrators can now disable service tokens without deleting them, allowing configuration to be preserved for later re-enablement. This helps contain credential exposure or pause automated services while maintaining the token's settings.
Four new WAF detections including HTTP/2 Request Smuggling and XSS JavaScript Event Handler Coercion are moved from Log to Block mode. The XSS, HTML Injection - Script Tag - Beta rule is merged into the original rule, and a new Generic Rules - Remote Code Execution detection is added in Block mode.
Cloudflare Access now supports grace periods during service token secret rotation, allowing both old and new secrets to remain valid for 1 hour to 30 days while administrators update services. The dashboard and API both support custom rotation schedules without interrupting authentication.
AI Search now supports larger custom metadata values within a shared 10 KiB metadata envelope per vector. The first 64 bytes of each indexed string remain filterable.
MCP server portals now support the stateless MCP 2026-07-28 specification for client and upstream server connections, with automatic backward compatibility for earlier 2025 clients and independent protocol selection between clients and servers.
97 more changes from Cloudflare. Sign up to read the whole changelog.
Sign up freeGitHub or email — no card needed.