Emergency WAF patching, a Miniflare rewrite, and agent harnesses everywhere

An actively exploited Magento zero-day, patched at the edge

The week's most urgent story came out of Cloudflare's emergency WAF rule for Adobe Commerce and Magento Open Source. CVE-2026-75650, nicknamed "StyleSmuggler," is an unauthenticated remote code execution flaw in the platform's template engine: improper neutralization of special elements lets attackers smuggle arbitrary PHP payloads through style properties. Cloudflare's Managed Ruleset now blocks the exploit at the edge, which matters because Magento storefronts are typically the highest-value target on a merchant's infrastructure and patching cycles are slow. But be clear about what this is — virtual patching. Cloudflare is explicit that origin applications still need the Adobe hotfix, and that exposed encryption keys, integration tokens, and system credentials should be rotated regardless. If you run Magento, the edge rule buys you time, not a fix.

Miniflare v5 redraws the local dev contract

The other structural shift this week was Miniflare v5, which realigns local Workers development with cloudflare.config.ts and the forthcoming cf CLI. It's a breaking release: deprecated and alpha D1 bindings are gone, internal wrappedBindings APIs are removed, built-in module discovery is dropped, /cdn-cgi routes move to /cdn-cgi/local, and per-resource persistence options collapse into shared persistence roots. Most projects consume Miniflare indirectly through wrangler dev, the Vite plugin, or the vitest plugin, so the practical impact should be limited — but anyone depending on it directly has migration work ahead.

The surrounding Workers toolchain kept pace. Wrangler 4.131.0 and deploy-helpers 0.11.0 both added Durable Object-managed Containers via scheduling_policy: "durable_object", resolving the namespace ID at upload so deploys stay idempotent, and versions upload now fails fast on pending DO migrations rather than surprising you later. Earlier in the week, Wrangler 4.130.0 fixed two long-standing annoyances — wrangler d1 execute --local being pathologically slow on large SQL files and wrangler dev running your custom build twice — while 4.129.1 stopped the dev server from crashing on transient GET/HEAD failures and moved bundle-size warnings to a 64 MiB uncompressed limit. Rounding out local fidelity, Miniflare's alpha now simulates Flagship bindings against a persisted local store with an admin API for tests, and Python Workers default to Python 3.14 on compatibility date 2026-09-08 or later.

Agent harnesses consolidate, and SSRF gets closed

Both platforms spent the week making agent runtimes portable. Vercel's AI SDK harness adapter for GitHub Copilot — announced alongside GitHub Copilot running through the harness layer via HarnessAgent — means Copilot now sits behind the same interface as every other supported harness. Cloudflare went the other direction on infrastructure, with Containers serving as self-hosted execution environments for the OpenAI Agents API, maintaining a Container per Codex session that reconnects on follow-up input and shuts down when idle. Vercel paired that with support for building OpenAI Agents API apps on Next.js and Functions.

Security cleanup accompanied the expansion: provider-utils 5.0.40 and MCP 2.0.49 both patched an SSRF in MCP OAuth metadata discovery. The same provider-utils release also fixed plain text prefixes being misdetected as BMP or GIF images.

Smaller but welcome

On the sandbox side, Vercel Sandbox doubled default storage to 64 GB and became available in all compute regions with per-sandbox region choice and failover. Monitoring improved for voice agents, where @cloudflare/voice v0.4.0 now emits per-turn latency and terminal-outcome metrics — useful when you're chasing a no_output or tts_error in production. And Next.js 16.3.5 backported fixes for 0-byte image cache entries and use cache prerender signal retention. Railway's CLI churned steadily through Codex and OpenCode setup flows and sandbox networking, part of a broad week of smaller releases we won't enumerate here.