According to The Block, NEAR AI has confirmed that a recent security breach compromised user account details due to a vulnerability within the SGLang framework. The company disclosed that the incident involved unauthorized access to sensitive information, specifically exposing user account data to potential threats. In its official explanation, NEAR AI emphasized that the scope of the breach was limited to account credentials and did not extend to private data storage.
The organization further clarified that there is no evidence suggesting that stored Private Chat conversations were accessed or leaked during the incident. Additionally, NEAR AI stated that uploaded files remain secure and were not compromised by the attackers. This distinction is critical for users who rely on the platform for sensitive communications, as it confirms that core privacy features remain intact despite the credential exposure.
The identification of SGLang as the entry point highlights potential risks associated with specific library integrations in AI infrastructure. By pinpointing the vulnerability, NEAR AI aims to provide transparency regarding the incident’s mechanics and reassure users about the integrity of their private data. The company’s disclosure underscores the importance of rigorous security auditing for underlying frameworks that handle user interactions.
As the situation develops, NEAR AI continues to monitor for any further unauthorized activity. Users are advised to remain vigilant regarding account security, although the company maintains that private chat histories and file uploads remain protected from the breach. This incident serves as a reminder of the evolving threat landscape for AI platforms and the necessity of continuous security assessments to mitigate potential vulnerabilities.
