NEAR AI Restores Cloud Service After SGLang Breach

NEAR AI has restored its Cloud service after fixing a software vulnerability in the SGLang inference engine that was exploited on November 8, according to a security report published by the company.

The security incident exposed account information belonging to approximately 100 users, including email addresses, names, subscription plans, and account balance details. Investigators reported no evidence that stored Private Chat conversations or uploaded files were accessed.

Incident Details and Impact

According to NEAR AI, the attacker exploited a remote code execution vulnerability in SGLang to gain access to an inference server before reaching an internal system connected to the company's discontinued Private Chat service.

The unauthorized party also accessed chat histories, configuration settings, and operational logs from 18 legacy AI agents operating on an older version that did not run inside a trusted execution environment. Two customers had Cloud API keys exposed through those operational logs, prompting NEAR AI to revoke both credentials.

System Restoration and Security Fixes

The company initially suspended Cloud inference operations upon detecting the breach. Following a forensic review, engineers deployed the SGLang security fix across all inference servers, replaced affected credentials, revoked active sessions and administrative credentials, replaced agent tokens, and took Private Chat offline.

NEAR AI stated that the underlying NEAR Protocol blockchain and other ecosystem services remained unaffected by the incident. The company reported the SGLang vulnerability to the project's maintainers.

Key facts

• NEAR AI restored its Cloud service after addressing an SGLang software vulnerability exploited on November 8.
• The breach exposed email addresses and names of approximately 100 users.
• Chat histories, settings, and logs from 18 legacy AI agents were accessed.
• Two customer API keys exposed through logs were revoked by NEAR AI.
• The underlying NEAR Protocol blockchain and other services remained unaffected.