NEAR AI published a report on a remote-code-execution vulnerability in SGLang that affected certain legacy deployment infrastructure. The investigation identified roughly 100 user details and 18 agents in the affected context, along with two exposed Cloud API keys, which were subsequently revoked. The company said there is no evidence that stored Private Chat content was compromised, although some requests made on November 8 may have been observed. NEAR AI said it remediated the vulnerability and notified affected parties, while clarifying that the incident did not involve NEAR blockchain consensus rules or users’ wallets.
Source: Read the original article


