Cloudflare disables leaked Access tokens
GitHub secret detection now triggers containment for exposed Cloudflare Access service tokens.
What changed
Cloudflare disables affected tokens and emails administrators. A leaked secret must be rotated before the token can be enabled again, with the old secret discarded immediately.
Why it matters
Automated containment can reduce exposure, while services using affected credentials need replacement secrets before recovery.
Cloudflare changelog
Announcement published November 11, 2026. This briefing is an original summary of the linked reporting or announcement.
Read the original