Skip to content

An editorial team and a community building with AI

vibecoding.incJoin Discord ↗
← All articles

News · NEAR AI · 2 min read

Event date: · Published:

NEAR AI discloses breach via unpatched SGLang inference-engine vulnerability

NEAR AI published a security incident report disclosing that an attacker exploited an unpatched RCE vulnerability in SGLang, exposing data from about 100 users and 18 legacy agents.

NEAR AI published a security incident report on November 9, 2026, disclosing that an attacker exploited an unpatched remote-code-execution vulnerability in SGLang, the open-source inference engine behind its Cloud and Agents products, on November 8, 2026. The breach exposed data tied to about 100 users and 18 legacy agents before NEAR AI restored access on November 10, 2026, according to the Security Incident Report: SGLang Vulnerability.

What happened

  • An attacker exploited an unpatched remote-code-execution vulnerability in SGLang, the inference engine NEAR AI runs, on November 8, 2026.
  • The attacker accessed the internal system behind NEAR AI's deprecated Private Chat feature.
  • 18 agents on NEAR AI's legacy, non-confidential-computing Agents deployment were accessed.
  • About 100 users had email, name, and account plan or balance data exposed.
  • Affected agent owners had chat history, settings, and logs exposed.
  • API keys for two Cloud customers were exposed via logs and have since been revoked.

What it means for AI builders

SGLang is a widely used open-source engine for running large language model inference, and NEAR AI relies on it to power its Cloud and Agents products. An unpatched remote-code-execution flaw in that engine leading to a real breach at a production AI provider is a concrete warning for anyone self-hosting or evaluating SGLang-based inference stacks, since the vulnerable component sits in infrastructure many other builders also run directly.

Remediation and current status

  • NEAR AI revoked all active sessions and admin credentials, and replaced all agent tokens.
  • The deprecated Private Chat feature was taken offline, and SGLang was patched across all servers.
  • NEAR AI Cloud access was restored on November 10, 2026, while Private Chat remains offline.
  • NEAR AI stated that the underlying NEAR blockchain protocol itself was unaffected.

Sources

Written with AI assistance, strictly from the sources listed above. Before it went live, automated checks verified its dates, sources and every language edition.

NEAR AI discloses breach via unpatched SGLang inference-engine vulnerability | vibecoding.inc