NEAR AI fixes SGLang security flaw, restores Cloud service

NEAR AI has restored its Cloud service after an attacker exploited a software vulnerability to access internal systems, exposing information belonging to approximately 100 users and data from 18 AI agents. NEAR AI restored its Cloud service after fixing an SGLang vulnerability exploited on November 8. Attackers accessed account information belonging to approximately 100 users, including email addresses and names. Eighteen legacy AI agents had chat histories, settings, and logs accessed during the security incident. Two customers had Cloud API keys exposed through logs, and NEAR AI revoked both credentials. NEAR AI said its blockchain protocol remained unaffected, with no established connection to Binance's hack. According to the company's security report, published November 9, the attacker gained access through SGLang, an open-source inference engine used on its servers.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to crypto.news.