TechFlow News, November 10 — According to an official incident report from NEAR AI, an attacker exploited a remote code execution vulnerability in SGLang, the open-source engine running on its inference servers, to access some infrastructure and download account information for approximately 100 users, including email addresses, names, and plan and balance information for some accounts.

NEAR AI said the attacker also accessed 18 agents in a legacy deployment, obtaining chat histories, settings, and logs. The API keys of two Cloud customers were exposed in the logs, and the affected keys have been revoked. On November 8, the attacker may also have observed user requests being processed by the affected servers, including requests made in confidential mode.

The company said it has fixed the vulnerability, rotated the credentials, and notified users confirmed to have been affected. TechFlow previously reported that NEAR AI Cloud is back online.