I would suggest to investigate the cloudflare issue indeed.
We had a couple ticket in the past talking about smart action being blocked by some WAF rules on cloudflare side - If that’s your case, I would suggest to contact cloudflare directly.
Let me know if that helps 