# Fix for Bot Management Cookie Issue with Cloudflare for SaaS (O2O) Deployments

- Provider: [Cloudflare](https://down.guide/cloudflare)
- Level: confirmed
- Impact: Degraded
- lasted 0m
- started 2026-03-12 20:40 UTC
- Bot Management
- id: DWN-ff2f77063b
- Official page: https://www.cloudflarestatus.com/incidents/y4728lkyp8xq

## Updates from Cloudflare
### 2026-03-12 20:40 UTC: resolved
Cloudflare is deploying a fix for a bug affecting customers using Bot Management with Cloudflare for SaaS origin-to-origin (O2O) configurations. 
These customers may have observed an issue where the \_\_cf\_bm cookie was repeatedly being reset on each O2O request. This occurred because the bot cookie code runs twice during O2O requests – once on the eyeball zone and once on the origin zone – causing the cookie to be overwritten due to a mismatch in origin and eyeball domains.
A fix is being implemented to prevent the \_\_cf\_bm cookie from being set on the origin hop of O2O requests. This will allow eyeball zones to properly utilize session scoring functionality and improve cacheability for O2O requests. The fix is expected to be completed by March 16, 2026.

---
down.guide reads providers' official status pages every minute and adds its own evidence, always labeled. Free, no account. Agents: MCP at https://down.guide/mcp, REST at https://down.guide/api/v1, feeds at https://down.guide/feed. Built by Sazabi (https://sazabi.com/?utm_source=down-guide&utm_medium=markdown).