[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkEh5rq42PpIRmJXx7Bdub_40s_----FLto15lISST70":3},{"article":4,"iocs":53,"watch_terms":54,"solutions":55,"lesson":145},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"2bdd800a-3268-4357-8ff9-61b702e41e33","SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users","sglang-rce-exploit-breaches-near-ai-steals-data-from-18-agents-and-about-100-use-12e105","An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI's inference servers last Sunday. The attacker could also have seen requests being processed on that server that day, including requests sent in confidential mode, the company said earlier this week. That mode processes requests inside a trusted execution environment (TEE","An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, to execute code on one of NEAR AI's inference servers. The breach compromised email addresses, names, and balance information for approximately 100 users, as well as chat history, settings, and logs from 18 AI agents on an older deployment. Two customer API keys were also exposed in logs before the company revoked all credentials, fixed the SGLang vulnerability, and completed a forensic review.","SGLang RCE vulnerability breached NEAR AI, exposing 100 users' account data and 18 AI agents.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F11\u002Fsglang-rce-exploit-breaches-near-ai.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEifQOwa1ngLZRATbbZyg_iud4SNx-9ugjo2iOG6crnJzatc_uS9FjGScBnNUy-uNIuOEE3Y6kJTpUVMVtOR1bW5sse_pRNJA1SQALCGjshDx6-CF1t8HXlUI2CCb6yp7Uepz6uk3ctMLUlSx4Q36Q7pZcx1nb9wPgbYAZqvd6CnSJ6WM6Kn_ZENtHpESoM\u002Fs1600\u002Fnearai.jpg","2026-11-10T19:19:39+00:00","2026-11-10T20:00:28.224101+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"SGLang","product",{"name":21,"type":22},"NEAR AI","vendor",{"name":24,"type":19},"NEAR AI Cloud",{"name":26,"type":19},"Private Chat",{"name":28,"type":19},"NEAR AI Agents",{"name":30,"type":31},"Trusted Execution Environment (TEE)","technology","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":32,"icon":34,"name":35,"slug":36},null,"Breaches","breaches",[38,43,48],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":44},{"id":45,"icon":34,"name":46,"slug":47},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":49},{"id":50,"icon":34,"name":51,"slug":52},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",[],[21,18,24],{"controls":56,"vendors":144},[57,86,115],{"slug":58,"name":59,"problem":60,"products":61},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[62,70,78],{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":87,"name":88,"problem":89,"products":90},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",[91,99,107],{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"cohesity","Cohesity","\u002Fvendor-logos\u002Fcohesity.png","dataprotect","Cohesity DataProtect","https:\u002F\u002Fwww.cohesity.com\u002Fplatform\u002Fdataprotect\u002F","Backup and recovery with immutable snapshots, on premises or as a service.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"veeam","Veeam","\u002Fvendor-logos\u002Fveeam.png","veeam-data-platform","Veeam Data Platform","https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fveeam-data-platform.html","Backup and recovery for virtual, physical, cloud and SaaS workloads, with immutable storage options.",{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"commvault","Commvault","\u002Fvendor-logos\u002Fcommvault.png","commvault-cloud","Commvault Cloud","https:\u002F\u002Fwww.commvault.com\u002Fplatform","Backup and recovery platform with immutable storage and recovery testing.",{"slug":116,"name":117,"problem":118,"products":119},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[120,128,136],{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":132,"product_name":133,"url":134,"description":135},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",{"vendor_slug":137,"vendor_name":138,"vendor_logo":139,"product_slug":140,"product_name":141,"url":142,"description":143},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","incident-response","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",[],{"slug":146,"title":147,"body":148,"framework_refs":149,"framework_notes":155},"unpatched-rce-in-open-source-ai-framework-leads-to-data-breach-across-users-and-ai-agents","Unpatched RCE in Open-Source AI Framework Leads to Data Breach Across Users and AI Agents","NEAR AI's inference server was compromised because it ran a vulnerable version of SGLang, an open-source AI inference engine with a known remote code execution flaw. The attacker leveraged this flaw to execute arbitrary code on the server, exposing personal data for roughly 100 users and sensitive logs—including API keys—from 18 AI agents. This incident illustrates the risk of deploying open-source dependencies without a disciplined process for tracking upstream vulnerability disclosures and applying patches promptly. The exposure of API keys in logs further compounded the breach, turning a single point of failure into a credential compromise event. Organizations building on open-source AI tooling must treat third-party inference engines with the same rigor as any other production dependency.",[150,151,152,153,154],"CIS Control 2: Inventory and Control of Software Assets (v8)","CIS Control 7: Continuous Vulnerability Management (v8)","NIST SP 800-53 SI-2: Flaw Remediation","NIS2 Article 21(2)(e)","OWASP A06:2021 Vulnerable and Outdated Components",{"NIS2 Article 21(2)(e)":156,"NIST SP 800-53 SI-2: Flaw Remediation":157,"OWASP A06:2021 Vulnerable and Outdated Components":158,"CIS Control 7: Continuous Vulnerability Management (v8)":159,"CIS Control 2: Inventory and Control of Software Assets (v8)":160},"This point requires security in acquisition, development, and maintenance including vulnerability handling, which directly covers the obligation to track and patch known vulnerabilities in dependencies like SGLang.","SI-2 requires organizations to identify, report, and correct information system flaws; applying this control would have mandated patching the SGLang vulnerability promptly after disclosure.","The breach occurred precisely because NEAR AI ran an outdated, vulnerable version of an open-source component, which is the exact risk scenario OWASP A06 addresses.","A continuous vulnerability management process—including subscription to upstream advisories and timely patching—would have ensured the SGLang RCE flaw was remediated before it could be exploited.","Maintaining an accurate inventory of open-source software components, including SGLang, would have enabled NEAR AI to quickly identify and scope the vulnerable deployment when the RCE flaw was disclosed."]