NEAR AI Addresses SGLang Vulnerability and Revokes Compromised Credentials

According to NewsBTC, NEAR AI has officially disclosed a security incident stemming from a vulnerability within its SGLang framework, specifically affecting legacy deployments. The artificial intelligence infrastructure provider confirmed that it has taken immediate remediation steps to secure its systems following the discovery of the flaw. Central to the company’s response was the revocation of API keys that were inadvertently exposed during the incident. This decisive action was taken to prevent unauthorized access and mitigate any potential risks associated with the compromised credentials.

The incident highlights the complexities inherent in managing legacy systems alongside modern AI tools. By identifying the specific vulnerability in older SGLang versions, NEAR AI demonstrated a proactive approach to threat management. The company’s report emphasizes the importance of rigorous security audits, particularly for components that may have been overlooked during initial deployment phases. The exposure of API keys represents a critical failure point, underscoring the necessity for continuous monitoring and rapid incident response protocols in AI environments.

Stakeholders and users are advised to review their own access tokens and ensure that any related credentials are rotated immediately. While NEAR AI has addressed the core issue by invalidating the exposed keys, the broader implications for system integrity remain a focal point for security analysts. This event serves as a reminder that even established platforms must maintain vigilance against evolving threats. The transparency of the disclosure reflects the company’s commitment to maintaining trust within the decentralized AI community. As the situation stabilizes, ongoing updates will likely focus on fortifying legacy deployments against similar vulnerabilities in the future.