According to CoinMeta, NEAR AI has announced that it has fixed a security vulnerability in its SGLang and has resumed cloud services. This vulnerability was exploited by attackers, resulting in the leakage of internal information of about 100 users and data from 18 AI proxies. According to a security report released by the company on November 9th, attackers accessed the internal system through SGLang, an open-source inference engine. The company stated that it has fixed the vulnerability, replaced the affected credentials, and completed an investigation. The incident occurred on November 8th when attackers took advantage of a remote code execution vulnerability in SGLang to access the company's infrastructure. The investigation found that attackers downloaded account information of about 100 users, including email addresses and names, as well as subscription plans and account balances for some users. The company confirmed that no stored private chat records or uploaded files were accessed, but confirmed that 18 proxies running an older version of AI were subjected to unauthorized access. NEAR AI stated that the credential replacement process has been completed, and notifications have been sent to the affected users.