Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets

Attackers are actively exploiting two critical vulnerabilities — an SSRF flaw in MLflow (CVE-2026-64849) and a remote code execution bug in FUXA (CVE-2026-25895) — almost immediately after public disclosure, highlighting the dangerously narrow window organizations have to patch before threat actors begin scanning. The MLflow SSRF vulnerability is particularly severe because it allows attackers to pivot from a web-facing service to internal cloud metadata endpoints, harvesting credentials that can grant broad access to cloud infrastructure. The FUXA flaw compounds the risk by enabling full remote code execution through file system manipulation, potentially giving attackers persistent footholds in operational technology environments. These incidents underscore a recurring pattern: unpatched internet-facing systems in AI/ML pipelines and industrial control contexts are high-value, often under-secured targets.