SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users Swati KhandelwalNov 10, 2026Vulnerability / Cloud Security An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI's inference servers last Sunday. The attacker could also have seen requests being processed on that server that day, including requests sent in confidential mode, the company said earlier this week. That mode processes requests inside a trusted execution environment (TEE) designed to keep them private even from the company itself. But the TEE "does not protect against a vulnerability in the software running inside the environment," the company said. SGLang runs inside the TEE, which is how the attacker could reach requests there. That access has since been closed, but not before the attacker moved further into the company's systems. The attacker reached an internal system behind Private Chat, a product the company had already deprecated. So far, the company has confirmed that the attacker downloaded account details for about 100 users there. These are email addresses and names, and for some accounts, plan and balance information. The company found no sign that stored Private Chat conversations or uploaded files were accessed. The attacker also reached 18 AI agents on an older deployment of NEAR AI Agents that did not run inside the company's TEE. From those agents, the attacker took data including chat history, settings and logs. Two customers' NEAR AI Cloud API keys were exposed in logs. The company has revoked both. After detecting the attack, the company revoked all active sessions and administrator credentials, replaced all agent tokens and took Private Chat offline. It also deployed a fix for the SGLang flaw on all of its inference servers, rotated its remaining credentials and completed a full forensic review, according to its incident report. Access to its NEAR AI Cloud service has been restored. The company reported the flaw to the SGLang project. It has not identified the flaw by CVE number, named the affected SGLang versions, or said whether the project has released a fix. The company has contacted users whose account details or agents it confirmed were accessed. Affected users heard directly from [email protected], with the steps that apply to them. As a precaution, the company asks users to be careful with messages about their account or balance that they did not ask for. In a follow-up post yesterday, it said users who have not heard from it do not need to do anything. It has not said whether people whose requests passed through the affected server last Sunday were among those contacted. In an October 15 technical write-up, Brave, the browser maker, said its Leo assistant runs chats with the GLM 5.3 Flash model inside a TEE operated by NEAR AI. NEAR AI has not said whether the affected server handled any of those chats. Found this article interesting? Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post. artificial intelligence, Cloud security, data breach, Vulnerability Apple to Start Scanning Publicly Shared iCloud Photos and Files for Harmful Content Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull Food Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges 5 Active Cyber Threats That Put US Enterprises at Risk in October 2026 CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories The Collapsed Patch Window: Why Runtime Protection is Now Your First Line of Defense Against AI-Driven Attacks Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux The Flood is Coming And The Pipes Were Already Full Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run Is Your Exposure Management Platform Leaving You Exposed? Five Tests to Find Out Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction See How Bitdefender GravityZone Identifies Shadow AI and Prioritizes Endpoint Risks Beyond CVE Scanning: Book a Demo of Continuous AI-Powered Web Pentesting Assess Your Organization's AI Code Sprawl Exposure With This Practical Guide Detect Lateral Movement and Evasive Attacks With Corelight's Open NDR Platform Your SOC Has an Identity Blind Spot. Here's How to Fix It Learn how to close critical identity visibility gaps in your SOC, detect hidden threats, and accelerate incident response across human, machine, and AI identities. Watch Free Now Roadmap for AI-Ready Security Operations Evaluate Attack Surface Visibility With an AI Threat Readiness Framework Learn how to assess AI threat readiness, strengthen attack surface visibility, and prepare security operations for emerging threats in this practical webinar. Governance Sets the Ceiling on Your AI Security Program See the five moves that raise a Stage 2 Govern score to a defensible Stage 3. 11 Real Stories: How Identity Exposure Unlocks Active Attack Paths Map cross-domain privilege escalation to sever breach routes at key choke points. BeyondTrust an 8X Gartner® Magic Quadrant™ Leader for PAM Gain clarity on the PAM market and understand why BeyondTrust is again a Leader. See how Identity Dark Matter impacts your GRC, IR, and Infrastructure. Watch the video. The Collapsed Patch Window: Why Runtime Protection is Now Your First Line of Defense Against AI-Driven Attacks Your Attack Surface Is Growing Faster Than Your Team Can Respond The MSP Margin Math Nobody's Doing: Your Next Technician Might Already be on Payroll PEDM vs. Standing Elevated Privileges: Control Access Without Flooding the Helpdesk