NEAR AI Discloses SGLang Security Incident and Revokes Exposed API Keys
Summary
NEAR AI disclosed an SGLang remote-code-execution vulnerability affecting legacy deployments. Its investigation identified about 100 user details and 18 agents in the affected context, and two exposed Cloud API keys were revoked. NEAR AI says it remediated the flaw and notified affected parties. It found no evidence that stored Private Chat content was accessed, but said requests made on November 8 may have been observed. The incident involved AI-serving infrastructure, not NEAR blockchain consensus or a general compromise of NEAR wallets. A fuller technical postmortem is still needed to explain the affected versions, root cause and fix validation.
