SGLang remote code execution exploit breaches NEAR AI inference servers

Tier B · Patch this week – Put it in the sprint

Who’s exposed: NEAR AI inference servers, agents and about 100 users

Tier B because: Exploited in the wild OR public exploit

Reach

Attack

Damage

Fix

Exploited in the wild · Full takeover · Secrets exposed

The Brief

An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine.
The attacker ran code on one of NEAR AI's inference servers last Sunday.
The attacker could also have seen requests processed on that server that day, and data from 18 agents and about 100 users was reported stolen.

Why it matters

Inference servers handle sensitive prompts and data, so a code execution flaw in a widely used inference engine can expose both the host and the requests it processes.

The checklist behind the tier

Checklist · 4 of 10 yes

Yes	Hits tech teams	SGLang is an LLM inference engine that developers and ops teams deploy and run.
No	Core infrastructure	Single open-source inference engine, not software nearly every team runs.
No	Popular tool	SGLang is a specialized LLM serving framework, not mainstream developer tech.
Yes	Exploited in the wild	The Hacker News: an attacker exploited the SGLang RCE flaw and breached NEAR AI.
No	Public exploit	The Hacker News excerpt does not say exploit code or a PoC was published.
No	Remote, no login	The Hacker News excerpt does not state the attack needed no credentials.
Yes	Full takeover	The Hacker News: the attacker ran code on one of NEAR AI's inference servers, which is RCE.
Yes	Secrets exposed	The Hacker News headline: attacker stole data from 18 agents and about 100 users.
No	Supply chain	The Hacker News describes exploiting a vulnerability, not compromised packages or updates.
No	No fix yet	The Hacker News excerpt does not say whether a patched SGLang version exists.

Timeline

Nov 8
Attacker ran code on a NEAR AI inference server (reported as last Sunday)
Nov 10 · 7:19 PM
The Hacker News
SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users

Source

SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users ↗ The Hacker News · 3h ago

First seen 3h ago · 1 source · Full story page · How tiers are decided