NEAR AI, the AI product and infrastructure arm of the NEAR ecosystem, disclosed a security breach in an incident report published Monday, The Block reported. An attacker exploited a remote code execution vulnerability in SGLang, an open-source inference engine running on its servers, to run code on one inference server. From there the attacker reached an internal system behind the deprecated Private Chat feature. Cryptonomist put the start of the breach at November 8.
According to NEAR AI, about 100 users had account details exposed, including names and email addresses and, in some cases, plan and balance information. On a legacy NEAR AI Agents deployment that ran outside its confidential computing environment, 18 agents had chat history, settings and logs accessed. API keys for two Cloud customers appeared in logs and have been revoked.
NEAR AI said that on November 8 the attacker could have observed requests being processed on the compromised server, including those in confidential mode. It found no indication that stored Private Chat conversations or uploaded files were accessed. The company said confidential computing protects data from the operator and the host but not from vulnerabilities in software running inside the environment.
NEAR AI said the access was closed, credentials replaced and all inference servers patched. NEAR AI Cloud, paused during the investigation, has been restored, and Private Chat is offline. Affected users and agent owners were contacted individually. The figures are NEAR AI’s own.
Track the market yourself with AiTraderView’s FREE tools: Crypto Cockpit for charts and 75+ indicators, Crypto Screener to find setups, and Crypto Portfolio to follow your holdings. Just create a FREE account and try them yourself!
Sources:
The Block: NEAR AI says SGLang vulnerability exposed user account details in security breach
Cryptonomist: NEAR AI Security Breach Exposes User Data and Legacy Agents
⚠️ RISK WARNING & AI DISCLOSURE
- This information is generated by Artificial Intelligence (AI) and complex algorithms. While advanced, these systems can contain errors or inaccuracies and are for educational purposes only.
- Technical analysis provides no guarantees; this information is purely informative.
- All discussed scenarios are hypothetical and do not constitute predictions or expectations.
- Past performance is not an indicator of future results.
- This is not financial advice and is not intended as a call-to-action for the reader.
- No implicit direction is claimed, and no specific behavior of market participants is suggested.