NEAR AI Discloses Security Incident Details: Approximately 100 User Account Records Downloaded

According to a TechFlow report on November 10, NEAR AI's official incident report said attackers exploited a remote code execution vulnerability in SGLang, an open-source engine running on its inference servers, accessed parts of its infrastructure, and downloaded account information for approximately 100 users, including email addresses, names, and plan and balance information for some accounts.

NEAR AI said the attackers also accessed 18 agents in legacy deployments and obtained chat records, settings, and logs; API keys for two Cloud customers were exposed in the logs, and the related keys have been revoked. On November 8, the attackers may also have observed user requests being processed on affected servers, including requests in confidential mode.

The company said it has fixed the vulnerability, rotated credentials, and notified users confirmed to be affected. TechFlow previously reported that NEAR AI Cloud has been restored online.

Source: TechFlow