NEAR AI announced on November 10 that its Cloud inference service is back online after engineers patched a critical vulnerability in the SGLang open‑source inference engine. The flaw, which was exploited on November 8, gave an unauthorized party remote code execution rights on an inference server, allowing further movement within the company’s internal network.

Scope of the breach

According to NEAR AI’s security report released on November 9, the attacker accessed account information belonging to approximately 100 users, including email addresses, names, subscription plans and, for some accounts, balance details. The breach also reached 18 legacy AI agents that were running on an older version of NEAR AI Agents; their chat histories, configuration settings and operational logs were downloaded.

Credential exposure and remediation

Two Cloud customers had their API keys exposed through the compromised logs. NEAR AI immediately revoked both credentials, replaced active sessions, administrative keys and agent tokens, and took the discontinued Private Chat service offline while the fix was applied. The company completed a full forensic review, contacted affected users and agents, and stated that no further action is required for customers who have not been contacted.

Impact on NEAR Protocol and broader context

NEAR AI emphasized that the incident did not affect the underlying NEAR Protocol blockchain or other services in the NEAR ecosystem. The breach occurred during the same week that Elliptic reported NEAR‑based tokens being used to launder roughly $430,000 from the Binance exchange hack, but the two events are unrelated. The company has reported the SGLang vulnerability to the upstream project and said future security reviews will cover inference software, dependencies and deployment configurations.

What to watch next

Observers will be monitoring whether additional SGLang users disclose similar exploits, how NEAR AI’s confidential computing model evolves after this incident, and if regulators require further disclosures from the company.