gcdRadar
live/Breaches & attacks/AIR-2026-1865
liveliveBreaches & attacks3 Confirmed exploitationAI

SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents

SGLang, NEAR AI

An attacker exploited an RCE vulnerability in SGLang to breach NEAR AI inference servers and access active requests. The incident resulted in data leakage affecting multiple user agents and requests.

why this severityConfirmed exploitation against real targets with data exposure.

first report
10 Nov 2026
last update
10 Nov 2026

Timeline · 1

  1. 10 Nov 2026SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users

Sources · 1

News and write-ups

  1. 2026-11-10
    SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users
    The Hacker News · thehackernews.com/2026/11/sglang-rce-exploit-breaches-near-ai.html

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
Attack on AI
categories
Infrastructure vulnerabilityData leak
severity
3 · Confirmed exploitation
targets
Framework / tooling, Enterprise deployment
mitre atlas
no technique for these categories
dates
happened 8 Nov 2026 · first reported 10 Nov 2026
origin
News & research feeds
record
confidence 0.95 · created 2026-11-10 20:42Z · updated 2026-11-10 20:42Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents

https://gcdradar.vercel.app/incidents/sglang-rce-exploit-breaches-near-ai-steals-data-from-18-agen · AIR-2026-1865 · live

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation): Confirmed exploitation against real targets with data exposure.
- Fix status: No fix needed
- First reported: 2026-11-10 (happened 2026-11-08)
- AI role: Attack on AI
- Products: SGLang, NEAR AI

## Summary

An attacker exploited an RCE vulnerability in SGLang to breach NEAR AI inference servers and access active requests. The incident resulted in data leakage affecting multiple user agents and requests.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-11-10: SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users (https://thehackernews.com/2026/11/sglang-rce-exploit-breaches-near-ai.html)

## Sources

- 2026-11-10 The Hacker News: SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users https://thehackernews.com/2026/11/sglang-rce-exploit-breaches-near-ai.html

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed4.3
    AnythingLLM AnythingLLM Authentication Flaw Permits Unauthorized Workspace Access

    Patch now · Disclosed · since 28 May 2026 · CVE-2026-47713

    AI
  2. closed8.2
    Dify CVE-2026-41949: Dify authorization bypass in file preview endpoint

    Patch now · Disclosed · since 18 May 2026 · CVE-2026-41949

    AI
  3. closed
    AI
  4. closed6.5
    Langflow CVE-2026-77817: IBM Langflow OSS Information Disclosure Vulnerability

    Patch now · Disclosed · since 29 Oct 2026 · CVE-2026-77817

    AI
  5. closed6.5
    Langflow CVE-2026-104314: IBM Langflow OSS Credential Disclosure Vulnerability

    Patch now · Disclosed · since 29 Oct 2026 · CVE-2026-104314

    AI
  6. closed7.5
    Nuxt Ollama CVE-2026-59158: Nuxt Ollama exposes cloud API keys in public configuration

    Patch now · Disclosed · Patched · since 27 Oct 2026 · CVE-2026-59158

    AI