NEAR AI Says SGLang Flaw Exposed Data of About 100 Users

Cointime update: NEAR AI disclosed that attackers exploited a remote code execution vulnerability in SGLang, the open-source engine running its inference servers, to access parts of its infrastructure and download account information for about 100 users, including email addresses, names and, for some accounts, plan and balance details. The attackers also reached 18 agents in a legacy deployment, exposing chat histories, settings and logs, and API keys for two Cloud customers were exposed in logs and have been revoked.