NEAR AI recently identified and contained unauthorized access to part of its infrastructure. The access has been closed, affected credentials have been replaced, the vulnerability that allowed it has been fixed, and access to NEAR AI Cloud has been restored.
The unauthorized party exploited a remote code execution vulnerability in SGLang, the open-source inference engine running on our servers. This gave them code execution on one inference server and, from there, access to our infrastructure.
Our investigation to date has confirmed that they then reached an internal system behind previously deprecated Private Chat and downloaded account details (email addresses, name, and for some accounts, plan and balance information) for approximately 100 users. Additionally, there was access to 18 agents on a legacy deployment of NEAR AI Agents which were not running in NEAR AI’s confidential computing (TEE) environment. On November 8, they could also have observed user requests being processed on the accessed server, including requests running in confidential mode. We have found no indication that stored Private Chat conversation or uploaded files were accessed. For the 18 agents, the data retrieved included chat history, settings and logs. Two Cloud customers had NEAR AI Cloud API keys exposed in logs. Those keys have been revoked.
Read more at Near AI.
