SGLang RCE exploited to breach NEAR AI servers

An attacker exploited a remote code execution vulnerability in SGLang, an open-source inference engine, to compromise one of NEAR AI's inference servers. The attacker gained access to processed requests, including some marked confidential and running inside trusted execution environments. At least 18 agents and approximately 100 users were potentially affected. NEAR AI disclosed the breach this week.