Releasesby GlyphWAF - WAF Release - 2026-08-26 - Emergency
This emergency release updates an existing Next.js remote code execution rule to identify CVE-2026-75604 and adds a new rule for remote code execution in the Next.js Image Optimizer via crafted AVIF images.
Also shipped Aug 26, 2026Cloudflare in August 2026 →
You can now view real-time logs for your Python UDFs in Cloud Logging
You can now view real-time logs for your Python UDFs in Cloud Logging. This feature is generally available .
Cortex Extension references in agent skills (General availability)
Referencing a Cortex Extension from an agent skill is now generally available. Set the skill source type to CORTEX_EXTENSION and path to the extension's fully qualified name, and Snowflake expands the reference into the extension's member skills at request time, so you don't list each skill individually.
Cortex Agents Coding Agent (General availability)
The Cortex Agents Coding Agent is now generally available. Add the code_toolset_all tool type to a Cortex Agent, and Snowflake provisions and manages a sandbox backed by the same runtime that powers Snowflake CoCo: bash, file read/write/edit, grep, glob, web search, SQL execution, and skills.
Organization user types (General availability)
With this release, you can specify whether an organization user represents a person or a service. Set the TYPE property to SERVICE for a service or application that interacts with Snowflake without human interaction. If you don't specify a type, the organization user is a PERSON user, which matches the previous behavior.
Semantic Studio (Preview)
Semantic Studio is now available in public preview for all accounts. Semantic Studio is the authoring environment for semantic views in Workspaces, combining conversational authoring with CoCo, direct YAML editing, and deployment to the live Snowflake object in a single surface.
Zerobus Ingest into streaming tables is now generally available
Ingesting into streaming tables with Zerobus Ingest in Lakeflow Connect is now generally available. Writing to a streaming table works the same way as writing to a managed Delta table, with the same limits and quotas. See Create or identify the target table .
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Access service token secrets use a scannable format
Cloudflare Access service token Client Secrets created on or after August 26, 2026, use the format cfast_[40 alphanumeric characters][8-character checksum] . The prefix and checksum make these credentials easier for secret scanning tools to identify with fewer false positives. Existing service token secrets continue to work and do not require rotation.
AI Search - New Workers AI text generation models in AI Search
AI Search now supports six additional Workers AI models for text generation: Model Context window (tokens) @cf/deepseek-ai/deepseek-v4-flash-0731 1,048,576 @cf/deepseek-ai/deepseek-v4-pro-0813 1,048,576 @cf/openai/gpt-oss-120b 128,000 @cf/openai/gpt-oss-20b 128,000 @cf/qwen/qwen3.8-27b 262,144 @cf/moonshotai/kimi-k2.7-code 262,144 These models run on...
Flagship - Create app-scoped API tokens for Flagship
You can now create app-scoped API tokens for Flagship . These tokens grant access only to the Flagship apps you select, instead of every app in the account. When you create a custom token, open the resource dropdown (it defaults to Entire Account ) and select Specified Flagship apps .
Log Explorer - Delete Log Explorer datasets
Cloudflare Log Explorer customers can now permanently delete account and zone datasets from the Cloudflare dashboard or API. Deletion protection is enabled by default to prevent accidental data loss. In the dashboard, go to Manage datasets , disable deletion protection for the dataset, select Delete , and enter the dataset name to confirm.
Logpush Connectors, Logs - Azure Functions-based Microsoft Sentinel connector deprecation
Cloudflare Enterprise customers using the Azure Functions-based Microsoft Sentinel connector ↗ must migrate to the Cloudflare for Microsoft Sentinel Codeless Connector Framework (CCF) connector ↗ by 2026-09-14. Microsoft is deprecating the Azure Monitor HTTP Data Collector API. Support for the API ends on 2026-09-14.
Radar Researcher adds richer sources and URL Scanner explanations
Cloudflare Radar expands the Radar Researcher ↗ beta with richer sources and new ways to investigate Internet data. Connected insights Radar Researcher responses can now link to relevant Radar pages, reports, and Cloudflare Blog posts.
Workers AI - Z.ai GLM-5.3 Flash now available on Workers AI
@cf/zai-org/glm-5.3-flash is now available on Workers AI. It is the first natively multimodal model in the GLM-5 series, built on a Mixture-of-Experts architecture with 320B total parameters and 18B active per token. GLM-5.3 Flash is the first GLM-family model on Workers AI to support multimodal inputs.
Automatic Platform Optimization - APO caches more crawler and bot traffic again
We fixed a regression where Automatic Platform Optimization (APO) stopped caching some HTML requests that did not send an explicit Accept: text/html header , commonly crawlers, bots, and uptime monitors. These requests were being served from your origin ( cf-cache-status: DYNAMIC ) instead of the cache. APO now caches these requests again.