Security · High impactFan score 47 · Tier B
SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users
The Hacker News ·
The Brief
- An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine.
- The attacker ran code on one of NEAR AI's inference servers last Sunday.
- The attacker could also have seen requests processed on that server that day, and data from 18 agents and about 100 users was reported stolen.
Why it matters
Inference servers handle sensitive prompts and data, so a code execution flaw in a widely used inference engine can expose both the host and the requests it processes.
Who’s affected
- NEAR AI users
- SGLang users
- #security
- #remote-code-execution
- #sglang
- #inference
- #data-breach
An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI's inference servers last Sunday. The attacker could also have seen requests being processed on that server that day, including requests sent in…
Timeline
Attacker ran code on a NEAR AI inference server (reported as last Sunday)
The Hacker News
SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users