When Agentic Glue Melts: Exploiting Cloudflare Code Mode and Workers

Check Point Research reports five memory-corruption vulnerabilities in workerd, the native C++ runtime underlying Cloudflare Code Mode and Workers. The runtime relies on V8 for in-process sandboxing, so successful exploitation could enable sandbox escape, unauthorized access to host or tenant resources, and potentially remote code execution depending on deployment context. The document also covers active threats including Iran-linked Cavern Manticore, browser-only ransomware, crypto clipboard hijacking, AI-agent framework exploitation, and supply-chain attacks; however, the primary security-re