Summary

  • NEAR AI said it identified and blocked unauthorized access to its infrastructure and a security vulnerability.
  • The company said the incident exposed about 100 users' account information, subscription and balance data, and data from 18 AI agents.
  • NEAR AI said it has completed follow-up measures including suspending the Private Chat service, revoking API keys, and patching the SGLang vulnerability.

Forecast Trend Report by Period

NEAR AI said it detected unauthorized access to part of its infrastructure and blocked the security vulnerability involved. The incident exposed account information for about 100 users and data from 18 AI agents running in its legacy environment.

In a blog post on Nov. 9, NEAR AI said attackers exploited a remote code execution vulnerability in SGLang, the open-source inference engine used on its servers. Investigators found that the attackers executed code on one inference server before gaining access to internal infrastructure.

The attackers then accessed internal systems related to the discontinued Private Chat service and downloaded the names and email addresses of about 100 users. In some cases, the data also included users' subscription plans and balance information.

The breach also affected 18 older AI agents that were not operating in NEAR AI's confidential computing environment. Exposed data from those agents included chat histories, settings and logs. API keys belonging to two NEAR AI Cloud customers were also exposed through logs, and both keys have since been revoked.

NEAR AI said on Nov. 8 the attackers may also have been able to view user requests being processed on the compromised server. That included requests handled in confidential mode. It added that it found no evidence that stored Private Chat conversations or uploaded files were actually accessed.

After confirming the incident, NEAR AI revoked all active sessions and administrator credentials and replaced all agent tokens. It also temporarily suspended the Private Chat service and applied the SGLang patch across all inference servers.

Access to NEAR AI Cloud has now been restored. The company has notified affected users individually and plans to make any required regulatory filings.

Minseung Kang