Hacking News
Near AI Breach Exposes User Details and Data
Near AI disclosed a breach that exposed account information and data from 18 AI agents after an attacker exploited a remote code execution vulnerability in SGLang, an open-source engine running AI models. The attacker downloaded names and email addresses for approximately 100 users, along with subscription plan and account balance information. Another 18 agents were accessed on an older deployment, where the attacker retrieved their chat histories, settings, and logs. The breach affected internal systems and exposed NEAR AI Cloud API keys, which were revoked by Near AI.