[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxmfBg0nn0MW8BVRd_-ALi1-XSjVEMIzKtpSkPvPUfCk":3},{"article":4,"iocs":55,"watch_terms":68,"solutions":69,"lesson":161},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"c72fc630-6edb-4d13-a4f6-69f7792a3096","Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets","attackers-exploit-mlflow-ssrf-flaw-to-steal-cloud-credentials-and-secrets-c960f8","Two critical vulnerabilities impacting MLflow, an open-source artificial intelligence (AI) platform, and FUXA, an open-source, web-based SCADA \u002F HMI software built for operational technology (OT) and industrial automation, are witnessing malicious scanning and exploitation efforts. According to independent reports from watchTowr and VulnCheck, the vulnerabilities in question are as follows -","Two critical vulnerabilities are being actively exploited: CVE-2026-64849 in MLflow allows attackers to steal cloud credentials via SSRF, and CVE-2026-25895 in FUXA enables remote code execution through file system manipulation. Attackers began scanning for both flaws shortly after their disclosure.","Attackers exploit MLflow SSRF flaw to steal cloud credentials and FUXA RCE flaw for file system access.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F08\u002Fattackers-exploit-mlflow-ssrf-flaw-to.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEiOzcJe940Ayk9JrnE-tmotZ-mEHZiA5Jc0A8Sw9IZIfYEnH61X8whAW6jJZTnzLIQYA37foce9X_fshoAVwjLyBKrjvHbkuhhtwZ2Mewxtf1Syn9FBOvZBqwcMWXOCKFNnASyrCOQ9XTF6f174Aa4O55O7tbU6evYcrrV0H_psoYYq3uQQ_GvZqsu0e0ik\u002Fs1600\u002Fmlflow.jpg","2026-08-18T17:44:05+00:00","2026-08-18T20:00:20.444456+00:00",8,[17,20,22,25,27,29],{"name":18,"type":19},"MLflow","product",{"name":21,"type":19},"FUXA",{"name":23,"type":24},"AI","technology",{"name":26,"type":24},"SCADA",{"name":28,"type":24},"OT",{"name":30,"type":31},"watchTowr","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":32,"icon":34,"name":35,"slug":36},null,"Vulnerabilities","vulnerabilities",[38,40,45,50],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",[56,60,63,66],{"type":57,"value":58,"context":59},"cve","CVE-2026-64849","SSRF vulnerability in MLflow",{"type":57,"value":61,"context":62},"CVE-2026-25895","Missing authentication and path traversal in FUXA",{"type":57,"value":64,"context":65},"CVE-2026-25939","Previous FUXA vulnerability",{"type":57,"value":67,"context":65},"CVE-2023-33831",[30,18,21],{"controls":70,"vendors":155},[71,100,129],{"slug":72,"name":73,"problem":74,"products":75},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[76,84,92],{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"slug":101,"name":102,"problem":103,"products":104},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[105,113,121],{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":130,"name":131,"problem":132,"products":133},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",[134,142,147],{"vendor_slug":135,"vendor_name":136,"vendor_logo":137,"product_slug":138,"product_name":139,"url":140,"description":141},"wiz","Wiz","\u002Fvendor-logos\u002Fwiz.png","wiz-cloud","Wiz Cloud","https:\u002F\u002Fwww.wiz.io\u002Fplatform\u002Fwiz-cloud","Agentless cloud security posture and attack path analysis across major cloud providers.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":143,"product_name":144,"url":145,"description":146},"cortex-cloud","Cortex Cloud","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcloud","Cloud security platform covering posture management and runtime protection.",{"vendor_slug":148,"vendor_name":149,"vendor_logo":150,"product_slug":151,"product_name":152,"url":153,"description":154},"orca-security","Orca Security","\u002Fvendor-logos\u002Forca-security.png","orca-cloud-security-platform","Orca Cloud Security Platform","https:\u002F\u002Forca.security\u002Fplatform\u002F","Agentless cloud security platform for posture, vulnerabilities and data exposure.",[156],{"slug":157,"name":30,"logo_path":158,"roles":159},"watchtowr","\u002Fvendor-logos\u002Fwatchtowr.png",[160],"reported_by",{"slug":162,"title":163,"body":164,"framework_refs":165,"framework_notes":177},"active-exploitation-of-mlflow-ssrf-and-fuxa-rce-flaws-exposes-cloud-credentials","Active Exploitation of MLflow SSRF and FUXA RCE Flaws Exposes Cloud Credentials","Attackers are actively exploiting two critical vulnerabilities — an SSRF flaw in MLflow (CVE-2026-64849) and a remote code execution bug in FUXA (CVE-2026-25895) — almost immediately after public disclosure, highlighting the dangerously narrow window organizations have to patch before threat actors begin scanning. The MLflow SSRF vulnerability is particularly severe because it allows attackers to pivot from a web-facing service to internal cloud metadata endpoints, harvesting credentials that can grant broad access to cloud infrastructure. The FUXA flaw compounds the risk by enabling full remote code execution through file system manipulation, potentially giving attackers persistent footholds in operational technology environments. These incidents underscore a recurring pattern: unpatched internet-facing systems in AI\u002FML pipelines and industrial control contexts are high-value, often under-secured targets.",[166,167,168,169,170,171,172,173,174,175,176],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 18: Penetration Testing","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 SC-7: Boundary Protection","NIST SP 800-53 AU-2: Event Logging","NIST CSF ID.RA-1: Asset Vulnerabilities Identified","NIST CSF PR.PT-3: Least Functionality","ITIL Change Management: Emergency Change Procedures","OWASP SSRF Prevention Cheat Sheet",{}]