[NEAR AI Discloses Scope of Security Incident: Approximately 100 User Accounts Downloaded] Odaily Planet Daily reports that NEAR AI stated in its latest security incident report that attackers exploited a remote code execution vulnerability in its open-source inference engine, SGLang, running on its servers. This allowed attackers to execute code on an inference server and gain access to related infrastructure. The attackers downloaded account information from approximately 100 users, including email addresses, names, and some account plans and balance information. Additionally, 18 NEAR AI Agents running on older deployments and not in a Trusted Execution Environment (TEE) were accessed, with chat logs, settings, and logs being stolen. API keys from two Cloud customers appeared in the logs; these keys have since been revoked. NEAR AI stated that on November 8th, attackers may have observed user requests being processed by the affected servers, including confidential mode requests. No stored Private Chat conversations or uploaded files have been accessed. NEAR AI has contained the unauthorized access, restored NEAR AI Cloud services, patched the vulnerability, rotated affected credentials, and taken Private Chat offline. Affected users and the owners of the 18 related Agents have been notified. NEAR AI has reported the vulnerability to the SGLang project and will make regulatory notifications as required.