What Cloudflare shipped

Cloudflare One adds fast flux detection as a predefined UEBA risk behavior that contributes to user risk scores, available on Enterprise plans.

User API tokens get a redesigned creation flow matching Account API tokens, with inline policy editing and token restrictions reviewed in one place.

Email security allow and block policies can now be given an expiration date, after which the policy stops applying, for all customers.

The runtime now retries failed fetch() and RPC calls to Durable Objects before they arrive, up to four times, when the error is retryable.

Private load balancers support hash endpoint steering and session affinity, keeping users on the same endpoint across Cloudflare One traffic and private networks.

Network Firewall adds a managed rule for CVE-2026-98432, disabled by default; it is recommended to enable it with Log first and switch to Block after review.

Browser Isolation policies gain a beta keyboard option, Allow read-only actions, which blocks data entry while keeping find, select all, copy, print and zoom available.

Personal Agents gain granular access controls, letting administrators set more specific permissions for top agents.

Radar adds Zero Wire, a hub of briefings on critical Internet vulnerabilities that separates confirmed facts from open questions and lists remediation steps.

A GA hotfix release of the Cloudflare One Client for Linux fixes an issue with building trusted certificate chains.

Scheduled WAF changes for November 10 log a new dangerous file upload detection and merge a beta directory traversal rule into the original.

WAF rule expressions for PHP remote code execution and out-of-memory vulnerabilities were updated; affected rules keep their block action.

R2 bucket metrics now break requests down by region and compare errors by HTTP status code, including 429 rate-limited errors.

Browser Run /crawl results now include per-URL outcomes such as success, robots_disallowed, timeout, and page_error, plus a job-level robots.txt report for up to 50 origins.

Agents SDK v0.33.0 moves PiHarness to Pi 1.5, cutting storage writes and memory use during streaming and raising throughput across many sessions.

Early Access customers get a dedicated Account Abuse Protection dashboard for reviewing login and sign-up activity, plus two new roles for dashboard and PII access.

Flagship bindings can evaluate flags from a local store during local development, so flags can be tested offline without affecting production.

Access service tokens can now carry up to five key-value tags for organizing credentials and controlling application access. A Service Token Tag policy selector authorizes tokens by exact key-value pair without listing each one.

Workers subrequests to BYOIP destinations now keep Workers context and original client signals instead of being treated as external traffic.

WAF rule expressions for PHP out-of-memory vulnerabilities were updated in the Cloudflare Managed and Free rulesets; actions remain Block.

An emergency WAF release adds a disabled-by-default Cloudflare Managed Ruleset rule for a Nuxt Image and IPX vulnerability, offering partial coverage.

Keyless SSL now supports TLS 1.3 for ECDSA certificates; RSA certificates still negotiate up to TLS 1.2.

Durable Objects deployments now defer code updates by default, letting active objects run current code for up to 5 minutes before hibernating.

The new DNS records experience is now the default on all plans and the classic page is retired; record types can now be changed from the records page.

Cloudflare WAN traffic can now be inspected for HTTP in a selected Gateway processing region via Regional Services, which requires unified routing.

Starting November 4, 2026, D1 queries returning more than 50 MB will fail; REST API import and export are exempt.

Browser Run now defaults to Chrome 152, and its default Quick Actions User-Agent reports Chrome 152 instead of Chrome 119, so allowlists may need updating.

Audit Logs v2 adds account-level analytics with an Actions over time chart, summary cards and clickable filtering; organization-level audit logs are not covered.

The SCIM population viewer shows the users and groups each identity provider has provisioned to Cloudflare One, with search, attribute views, group members and per-resource deletion.

Agent Skills in the Agents SDK are now files: a folder with SKILL.md under /workspace/.agents/skills/ is usable on the next turn without a build or deploy.

Workers Builds keeps each build and its logs for 90 days; after that they are removed, but versions and deployments remain and logs can be downloaded via the API.

Workers Static Assets can now be served from a URL path prefix via assets.base_path, without changing the directory structure.

VPC Network bindings can target a specific virtual network with network_id using cf1:vnet:<UUID>, letting one Worker reach separate backends with the same private IP.

WAF rule expressions for PHP out-of-memory vulnerabilities were updated; the affected managed and free ruleset rules continue to block.

Agents SDK internal hostnames let an agent's browser reach a dev server or Worker without exposing it publicly, with each host using a fetch function.

MCP tool-call analytics accept a response_status parameter to count success, error or cached calls; the default is now success instead of all statuses.

Google Workspace SCIM user provisioning can now send updates and deprovisioning to Cloudflare One through a generic SAML identity provider.

Workflows can be restricted to the eu, us or fedramp jurisdiction at creation, which cannot be changed later; mismatched deploys stop before upload.

The SQL API introspection endpoint adds an include_attributes parameter that discovers attribute keys and types from the past seven days; the older parameter is deprecated.

Custom Workers spans add spanContext(), setStatus() and updateName() methods for trace IDs, span status and renaming after a span starts.

DNS settings endpoints are rolling out nameservers.type: "cloudflare.advanced" for Advanced Nameservers over about seven days, with foundation_dns kept as a deprecated alias.

From v0.7.0, Cloudflare Computer can resume interrupted agent runs with onInterrupt: "replay" and pause on an external action such as tool-call approval.

An emergency Managed Ruleset release adds two Log-action rules for the Brotli vulnerability CVE-2026-111497, covering Brotli request bodies and the Next.js image endpoint.

An emergency Cloudflare Free Ruleset release adds the CVE-2026-115560 identifier to the existing PHP remote code execution rule; detection and actions are unchanged.

An emergency Cloudflare Managed Ruleset release adds the CVE-2026-115560 identifier to the existing PHP remote code execution rule; detection and actions are unchanged.

Workers Builds now uses the npm version set in package.json's packageManager field, which also sets Yarn, pnpm and Bun versions; it does not use engines.npm.

Workers Builds and Pages build images reject eight compromised eMudhra intermediate certificates and ship patched CA certificates plus updated runtimes; most projects need no changes.

The Cloudflare Radar homepage was redesigned with an interactive map, a curated insights section and an updated interface; further page redesigns are planned.

Flagship evaluation context now accepts nested objects, arrays and null, with dot-separated paths and has/not_has operators for targeting.

The D1 undelete API now only accepts databases deleted within the last 7 days; older requests return an error.

An emergency WAF release updates names and metadata of seven rules in the Cloudflare Free Ruleset to reference two CVEs. Detection logic and rule actions are unchanged.

An emergency WAF release updated names and metadata of seven managed ruleset rules to reference CVE-2026-109618 and CVE-2026-109619, with detection logic and actions unchanged.

The Tunnel granular connector read and monitor role is generally available, granting read access and log streaming for specific tunnels without write access.

Cloudflare Tunnel version 2026.10.0 can normalize URLs before ingress matching; normalization becomes default for new releases starting 2027-01-25.

Sandbox SDK 0.12.14 updates certificates to distrust eight compromised eMudhra intermediates. Users should install the version, update the Dockerfile FROM line to the matching image, and redeploy; a prerelease fix is also available.

The Agents SDK now supports the Pi 1.4 release.

Cloudflare MCP servers no longer serve the /sse endpoint.

A macOS Cloudflare One Client beta raises the minimum supported version to macOS 15.0 and adds automatic Global Acceleration endpoint selection. It also shows a banner when the network limits tunnel MTU to degraded levels.

A Windows Cloudflare One Client beta adds automatic Global Acceleration endpoint selection, with reconnection on network changes, and an optional administrator code required to uninstall or modify the client.

An emergency Cloudflare Free Ruleset release adds seven rules that block anomalous request patterns, each a new detection with a block action.

An emergency release added seven Cloudflare Managed Ruleset rules to detect anomalous request patterns, all set to block.

Logpush added account-scoped HTTP request logs.

Basin SQL now supports OFFSET for skipping a specified number of rows in query results, for use with LIMIT for paging.

A GA hotfix for the macOS Cloudflare One Client, version 2026.7.1384.0, addresses an issue building trusted certificate chains.

A GA hotfix for the Windows Cloudflare One Client, version 2026.7.1384.0, addresses an issue building trusted certificate chains.

Wrangler and cf now upload source maps by default. The entry does not describe further details.

Think agents now use a @cloudflare/computer workspace. The entry does not describe further details.

Release of Cloudflare One Client for Linux, version 2026.8.2115.0. The entry does not describe specific changes.

Release of Cloudflare One Client for macOS, version 2026.8.2115.0. The entry does not describe specific changes.

Release of Cloudflare One Client for Windows, version 2026.8.2115.0. The entry does not describe specific changes.

Cloud Workload Security is now available in Beta.

Precursor adds a Monitor mode.

The Cloudflare API MCP server now supports step-up authorization.

Cron Triggers can be tested with Local Explorer.