Our team at @Accomplish_ai was able to exploit a vulnerability in Cloudflare Containers that let a sandbox read other customers' files - SQLite DBs, Chromium profiles, .env files etc.

Cloudflare Sandboxes and Browser Run run on the same disk implementation and were affected too.