NEAR AI Contains Security Breach After SGLang Vulnerability Exploitation

TL;DR NEAR AI contained unauthorized access after an attacker exploited an SGLang remote code execution vulnerability, reaching an inference server and internal infrastructure. About 100 users had account details downloaded, 18 legacy agents exposed chat history and logs, and two customers had API keys exposed and revoked. NEAR AI patched inference servers, rotated credentials and restored Cloud access, while reporting no evidence that Private Chat conversations or uploaded files were accessed. NEAR AI contained unauthorized access to part of its infrastructure after an attacker exploited a remote code execution vulnerability in SGLang, the open-source inference engine running on its servers. According to the official incident report , the attacker gained code execution on one inference server before reaching internal systems.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Crypto Economy.