1
Verify the likely cause
Send Cache-Control private, no-store for user data, bypass CDN caching on authenticated routes and remove any broad cache rule.
FULL AI ANALYSIS
Cloudflare caches private API responses between users
Generated Sep 19, 2026, 11:55:04 PM
Analysis summary
The reported behaviour is consistent with the origin marks authenticated responses as publicly cacheable without varying on authorization. The safest next step is to verify that hypothesis with a reversible test before making permanent configuration changes.
Possible causes
The origin marks authenticated responses as publicly cacheable without varying on authorization.
74%A recent software, firmware or configuration change is exposing an existing compatibility issue.
44%Suggested fixes
2
Validate and monitor
Reproduce the issue once after the change, review relevant logs or metrics, and keep a rollback path until the system has remained stable.