SGLang RCE Exploit Breaches NEAR AI, Hits 18 Agents
An attacker exploited a remote code execution vulnerability in SGLang, an open-source LLM inference engine, to compromise NEAR AI's inference servers, including those running inside a Trusted Execution Environment. The breach exposed account data for approximately 100 users and exfiltrated chat history, settings, logs, and API keys from 18 AI agents. The incident highlights a critical gap in TEE-based security architectures: software vulnerabilities within the trusted environment can still be exploited, undermining confidentiality guarantees.