NEAR AI said in a November 9 incident report that an SGLang remote-code-execution vulnerability affected its legacy deployment infrastructure. Its investigation identified roughly 100 user details and 18 agents in the affected context, and two exposed Cloud API keys that it said it revoked. The company said it remediated the vulnerability and notified impacted parties.
NEAR AI said it found no evidence that stored Private Chat content was compromised, but cautioned that some requests made on November 8 could have been observed. The report concerns AI-serving infrastructure, not a reported flaw in NEAR blockchain consensus or a general compromise of NEAR wallets.
