Attacker exploits SGLang flaw to access NEAR AI inference server

NEAR AI said the attacker could have viewed requests processed on the affected server, including those using confidential mode. The breach exposed user account details, The Block reports, but the company found no indication that stored Private Chat conversations or uploaded files had been accessed.

• The Hacker News reports data theft affecting 18 agents and about 100 users.
• SGLang is an open-source inference engine, according to The Hacker News.

Covered by 3 publishers within 3 hours of the first report.

• The Hacker News: SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users

Reporting3

RTW RuntimeWire NEAR AI says SGLang flaw let attacker into its infrastructure, including a server handling confidential-mode requests · Emerson Redding 12:18 PM

THN The Hacker News SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users · info@thehackernews.com (The Hacker News) 2:19 PM

DE Decrypt Near AI Breach Exposes User Details and Data From 18 AI Agents · Jose Antonio Lanz 3:16 PM

Related

BC WorkOS says attacker used ARTEX AI to breach internal sales app November 2

TNW UK AI minister says a serious cyber breach is ‘extremely likely’ November 3

TB Binance says fake interviews and AI tool enabled $6.3 billion theft November 2

THN PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network October 28

Topics Data breaches