{"id":"INC-cloudflare-3en9cdyjn2sq","kind":"incident","aliases":[],"related":[],"title":"Cloudflare: Prediction issue on OpenAI models via Replicate","description":"Cloudflare is aware of, and investigating, an issue affecting predictions on official OpenAI models via Replicate. Customers may see that some predictions are failing with a 401 token_invalidated error. We are working to mitigate this problem. More updates to follow shortly.","summary":"Cloudflare reports an ongoing incident where some predictions on official OpenAI models via Replicate fail with a 401 token_invalidated error. The source describes an availability problem and states no attacker access or data exposure.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Cloudflare","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["cdn","cloudflare","dns","incident","openai","ops","replicate","security","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T18:35:39+00:00","first_seen_at":"2026-11-10T18:36:17+00:00","triaged_at":"2026-11-10T18:36:59+00:00","updated_at":"2026-11-10T18:44:48+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-11-10T18:36:59Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Cloudflare: OpenAI model predictions via Replicate failing with 401 errors","impact":"low","summary":"Cloudflare reports an ongoing incident where some predictions on official OpenAI models via Replicate fail with a 401 token_invalidated error. The source describes an availability problem and states no attacker access or data exposure.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["cloudflare","replicate","openai"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Predictions fail with authentication errors during the incident","analyst_note":"","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":[],"who_is_affected":"Teams that call OpenAI models through Replicate and see 401 token_invalidated errors on their predictions are affected, according to the incident notice. The sources do not say which Cloudflare services are involved or how customers should respond, so the status page is the place to watch for updates.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.00066,"input_tokens":4560,"output_tokens":408,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'3en9cdyjn2sq':12A '401':40B,84C 'access':54B 'affect':66C 'attack':53B 'avail':48B 'awar':60C 'cdn':14B 'cloudflar':1A,15B,23B,58C 'cloudflare':11A,13A 'custom':74C 'data':56B 'describ':46B 'dns':16B 'error':43B,87C 'exposur':57B 'fail':37B,81C 'follow':98C 'inc':10A 'inc-cloudflare-3en9cdyjn2sq':9A 'incid':17B,27B 'invalid':42B,86C 'investig':63C 'issu':3A,65C 'may':75C 'mitig':92C 'model':6A,34B,71C 'offici':32B,69C 'ongo':26B 'op':19B 'openai':5A,18B,33B,70C 'predict':2A,30B,67C,79C 'problem':49B,94C 'replic':8A,20B,36B,73C 'report':24B 'secur':21B 'see':76C 'short':99C 'sourc':45B 'state':51B 'token':41B,85C 'updat':96C 'vendor':22B 'via':7A,35B,72C 'work':90C","nicknames":[],"mitigations":[],"who_affected":"Teams that call OpenAI models through Replicate and see 401 token_invalidated errors on their predictions are affected, according to the incident notice. The sources do not say which Cloudflare services are involved or how customers should respond, so the status page is the place to watch for updates.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["cloudflare"],"ptokens":["cloudflare"],"labels":["cdn","cloudflare","dns","incident","medium","openai","ops","replicate","security","vendor"],"campaign_type":null,"search_a":"'3en9cdyjn2sq':12A 'cloudflar':1A 'cloudflare':11A,13A 'inc':10A 'inc-cloudflare-3en9cdyjn2sq':9A 'issu':3A 'model':6A 'openai':5A 'predict':2A 'replic':8A 'via':7A","search_b":"'401':40B 'access':54B 'attack':53B 'avail':48B 'cdn':14B 'cloudflar':15B,23B 'data':56B 'describ':46B 'dns':16B 'error':43B 'exposur':57B 'fail':37B 'incid':17B,27B 'invalid':42B 'model':34B 'offici':32B 'ongo':26B 'op':19B 'openai':18B,33B 'predict':30B 'problem':49B 'replic':20B,36B 'report':24B 'secur':21B 'sourc':45B 'state':51B 'token':41B 'vendor':22B 'via':35B","search_c":"'401':84C 'affect':66C 'awar':60C 'cloudflar':58C 'custom':74C 'error':87C 'fail':81C 'follow':98C 'invalid':86C 'investig':63C 'issu':65C 'may':75C 'mitig':92C 'model':71C 'offici':69C 'openai':70C 'predict':67C,79C 'problem':94C 'replic':73C 'see':76C 'short':99C 'token':85C 'updat':96C 'via':72C 'work':90C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T18:35:39+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"cloudflare:3en9cdyjn2sq","url":"https://www.cloudflarestatus.com/incidents/3en9cdyjn2sq","severity":"medium","published_at":"2026-11-10T18:35:39+00:00","modified_at":"2026-11-10T18:43:50+00:00","first_seen_at":"2026-11-10T18:36:17+00:00","fetched_at":"2026-11-10T18:53:18+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}