SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents
SGLang, NEAR AI
An attacker exploited an RCE vulnerability in SGLang to breach NEAR AI inference servers and access active requests. The incident resulted in data leakage affecting multiple user agents and requests.
why this severityConfirmed exploitation against real targets with data exposure.
- first report
- 10 Nov 2026
- last update
- 10 Nov 2026
Timeline · 1
Sources · 1
News and write-ups
- 2026-11-10SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 UsersThe Hacker News · thehackernews.com/2026/11/sglang-rce-exploit-breaches-near-ai.html
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- AI role
- Attack on AI
- categories
- Infrastructure vulnerabilityData leak
- severity
- 3 · Confirmed exploitation
- targets
- Framework / tooling, Enterprise deployment
- mitre atlas
- no technique for these categories
- dates
- happened 8 Nov 2026 · first reported 10 Nov 2026
- origin
- News & research feeds
- record
- confidence 0.95 · created 2026-11-10 20:42Z · updated 2026-11-10 20:42Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents https://gcdradar.vercel.app/incidents/sglang-rce-exploit-breaches-near-ai-steals-data-from-18-agen · AIR-2026-1865 · live - Lane: Breaches & attacks - Severity: 3 (Confirmed exploitation): Confirmed exploitation against real targets with data exposure. - Fix status: No fix needed - First reported: 2026-11-10 (happened 2026-11-08) - AI role: Attack on AI - Products: SGLang, NEAR AI ## Summary An attacker exploited an RCE vulnerability in SGLang to breach NEAR AI inference servers and access active requests. The incident resulted in data leakage affecting multiple user agents and requests. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-11-10: SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users (https://thehackernews.com/2026/11/sglang-rce-exploit-breaches-near-ai.html) ## Sources - 2026-11-10 The Hacker News: SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users https://thehackernews.com/2026/11/sglang-rce-exploit-breaches-near-ai.html Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closed4.3AnythingLLM AnythingLLM Authentication Flaw Permits Unauthorized Workspace Access
Patch now · Disclosed · since 28 May 2026 · CVE-2026-47713
AI - closed8.2Dify CVE-2026-41949: Dify authorization bypass in file preview endpoint
Patch now · Disclosed · since 18 May 2026 · CVE-2026-41949
AI - closedMicrosoft 365 Agents SDK CVE-2026-109485 Microsoft 365 Agents SDK Information Disclosure Vulnerability
Patch now · Disclosed · since 10 Nov 2026 · CVE-2026-109485
AI - closed6.5Langflow CVE-2026-77817: IBM Langflow OSS Information Disclosure Vulnerability
Patch now · Disclosed · since 29 Oct 2026 · CVE-2026-77817
AI - closed6.5Langflow CVE-2026-104314: IBM Langflow OSS Credential Disclosure Vulnerability
Patch now · Disclosed · since 29 Oct 2026 · CVE-2026-104314
AI - closed7.5Nuxt Ollama CVE-2026-59158: Nuxt Ollama exposes cloud API keys in public configuration
Patch now · Disclosed · Patched · since 27 Oct 2026 · CVE-2026-59158
AI