SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users

An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI’s inference servers. The company says the attacker could also have seen requests being processed on that server that day, including requests sent in confidential mode, and the breach exposed data from 18 AI agents and about 100 users.