NEAR AI says it has restored Cloud access after an SGLang remote code execution flaw let an attacker compromise an inference server and reach internal systems.
Its November 9 report confirms that account details for approximately 100 users were downloaded from a system behind deprecated Private Chat. The attacker also retrieved chat histories, settings and logs from 18 legacy agents outside its confidential computing environment. Two customers’ Cloud API keys appeared in exposed logs and have been revoked.
On November 8, the attacker could also have observed requests processed on the compromised server, including confidential requests. NEAR AI found no indication that stored Private Chat conversations or uploaded files were accessed.
The company explains that hardware enclaves do not protect against vulnerable software running inside them. It says it patched every inference server, rotated credentials and notified affected users.
The report identifies neither a CVE nor affected or fixed SGLang versions. Affected users should follow NEAR AI’s individual remediation notices.
