[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fy7TyYwXws34xFH_VaHTn7TS4YOTp9EkpN5FkoH_0yoQ":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":23,"status":24,"created_at":25,"published_at":26,"article":27,"tags":31,"podcasts":50,"controls":51},"d39859fa-6d0a-4b01-adae-5c81c579f8a5","active-exploitation-of-mlflow-ssrf-and-fuxa-rce-flaws-exposes-cloud-credentials","c72fc630-6edb-4d13-a4f6-69f7792a3096","Active Exploitation of MLflow SSRF and FUXA RCE Flaws Exposes Cloud Credentials","Attackers are actively exploiting two critical vulnerabilities — an SSRF flaw in MLflow (CVE-2026-64849) and a remote code execution bug in FUXA (CVE-2026-25895) — almost immediately after public disclosure, highlighting the dangerously narrow window organizations have to patch before threat actors begin scanning. The MLflow SSRF vulnerability is particularly severe because it allows attackers to pivot from a web-facing service to internal cloud metadata endpoints, harvesting credentials that can grant broad access to cloud infrastructure. The FUXA flaw compounds the risk by enabling full remote code execution through file system manipulation, potentially giving attackers persistent footholds in operational technology environments. These incidents underscore a recurring pattern: unpatched internet-facing systems in AI\u002FML pipelines and industrial control contexts are high-value, often under-secured targets.","**Immediate actions:**\n- Apply vendor-supplied patches or upgrade MLflow and FUXA to the latest secure versions without delay.\n- Block or restrict outbound requests from MLflow and similar ML platform services to cloud metadata endpoints (e.g., 169.254.169.254) using firewall rules or egress filtering.\n- Audit all internet-facing ML and OT\u002FSCADA services to confirm exposure scope and isolate any compromised systems.\n\n**Long-term improvements:**\n- Implement an automated vulnerability scanning and patch management program that prioritizes internet-facing and cloud-connected assets.\n- Enforce least-privilege IAM policies so that even if cloud credentials are stolen via SSRF, their blast radius is minimized.\n- Maintain a current, accurate software inventory (SBOM) covering ML frameworks and industrial control platforms to accelerate response when new CVEs are disclosed.\n\n**Detection measures:**\n- Deploy runtime monitoring to alert on unusual outbound HTTP requests from ML services targeting internal or metadata IP ranges.\n- Configure SIEM rules to detect rapid exploitation indicators such as scanning patterns or anomalous file system access associated with FUXA exploitation.\n- Enable cloud provider audit logging (e.g., AWS CloudTrail, Azure Monitor) to detect credential usage from unexpected sources or geolocations.",[12,13,14,15,16,17,18,19,20,21,22],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 18: Penetration Testing","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 SC-7: Boundary Protection","NIST SP 800-53 AU-2: Event Logging","NIST CSF ID.RA-1: Asset Vulnerabilities Identified","NIST CSF PR.PT-3: Least Functionality","ITIL Change Management: Emergency Change Procedures","OWASP SSRF Prevention Cheat Sheet",{},"published","2026-08-18T20:21:16.974563+00:00","2026-08-18T20:21:16.692+00:00",{"id":7,"url":28,"slug":29,"title":30},"https:\u002F\u002Fthehackernews.com\u002F2026\u002F08\u002Fattackers-exploit-mlflow-ssrf-flaw-to.html","attackers-exploit-mlflow-ssrf-flaw-to-steal-cloud-credentials-and-secrets-c960f8","Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets",[32,38,44],{"id":33,"name":34,"slug":35,"description":36,"color":37},"05757c8d-6b93-4194-b35d-7359e7d33b0e","Vulnerability Management","vulnerability-management","Missing scans, no risk prioritization","#fb923c",{"id":39,"name":40,"slug":41,"description":42,"color":43},"859cf0ad-a7e9-42bb-a75d-bac6511fa5d5","Configuration Management","configuration-management","Misconfigs, default credentials, exposed services","#eab308",{"id":45,"name":46,"slug":47,"description":48,"color":49},"af7fce9e-1ce8-4156-93bc-09dcfbfdf29d","Patch Management","patch-management","Unpatched vulnerabilities, delayed updates","#ef4444",[],[52,56,59],{"slug":53,"name":54,"problem":55},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",{"slug":35,"name":57,"problem":58},"Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",{"slug":60,"name":61,"problem":62},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak."]