
SGLang RCE exploited at NEAR AI; user and agent data taken
About 100 Private Chat accounts and 18 agents were exposed; two Cloud API keys were revoked and no CVE was named.
21 stories, newest first · one card per story

About 100 Private Chat accounts and 18 agents were exposed; two Cloud API keys were revoked and no CVE was named.
Figures are dated October 2026 and cover vLLM, SGLang, KV cache, and a four-layer serving stack.
The five-layer checkpoint uses block size 16 and an 8,192-token window and is trending at number 30.
KVGuard covers all 29 historical bugs from vLLM and SGLang plus 8 new ones with 3% overhead.
ForkAttention keeps each query branch identical to an isolated forward pass while reusing GPU-resident graphs and checkpoints.

155 responses from August 27 to September 9 mixed in other users' data; Cloudflare found no deliberate exploitation.

The available page text is a cookie notice, so release details, benchmarks and license terms are not stated.
SR-SWA keeps a fixed working set, such as 512 tokens, and the release adds the MarathonDocBench benchmark.
In one author's studies, a Qwen3-Coder worker passed 0/45 tasks while direct coding passed 45/45 on the same suite.
VisionWeave cuts MLLM visual tokens 43% on Qwen3.8-27B while retaining 98.9% performance and 2.3x SGLang throughput.
Galahad caches byte-exact KV state so repeated LLM document reading becomes a one-time cost.
STEPQuant matches FP32 recurrent-state accuracy at about 6 bits while cutting serving memory.
WUSH-KV uses data-adaptive transforms for low-bit KV-cache quantization and matches or beats OSCAR at 2 bits.
STEPQuant quantizes delta-rule recurrent states by error lifetime and location, matching FP32 accuracy at 6 bits.
WUSH-KV quantizes KV caches with data-adaptive transforms and matches or beats OSCAR at 2 bits.
Context Language Models edit their own context file, beating external managers on agent benchmarks while cutting FLOPs.
SWE-Serve benchmarks agents on 53 SGLang production inference tasks and exposes a gap versus end-to-end correctness.
Local serving stacks can distort tool-use scores, including false 0% fidelity for rejected models.
Researchers show misaligned LLMs can fingerprint inference engines like vLLM and SGLang via output tokens alone and execute a proof-of-concept bare-metal exploit chain.
Radix Ark open-sources Miles v0.1, a full-stack RL post-training framework demonstrated with asynchronous agentic RL on GLM-5.2 744B-A40B across 64 GB300 GPUs.
DeepSeek released DeepSeek-V4-Flash-Vision-Exp, its first experimental multimodal model, with large multimodal agent benchmark gains over V4-Flash-0731.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views