Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets
Attackers exploit MLflow SSRF CVE-2026-64849 (CVSS 9.3) to steal cloud credentials; CISA added it to KEV; FUXA flaw CVE-2026-25895 is being scanned.
watchTowr observed exploitation of MLflow CVE-2026-64849, an unauthenticated SSRF (CVSS 9.3) affecting versions below 3.15.0, within hours of CVE assignment on August 17, 2026, with attackers abusing model-registry webhooks to reach cloud metadata endpoints and exfiltrate credentials and secrets. CISA added the flaw to its Known Exploited Vulnerabilities catalog on August 19, 2026, with a September 2 patch deadline for federal civilian agencies. VulnCheck reported scanning of FUXA CVE-2026-25895 (missing authentication plus path traversal, CVSS 9.5, versions through 1.2.9) beginning August 18; about 60 FUXA instances are exposed and no RCE payloads have been dropped yet.
- watchTowr saw indiscriminate scanning of exposed MLflow instances within hours of CVE assignment on August 17.
- Attackers abuse model-registry webhooks to proxy requests to cloud metadata and steal credentials; bypasses prior fixes via redirects.
- CISA added CVE-2026-64849 to KEV on August 19; federal patch deadline September 2, 2026.
- VulnCheck observed single-IP scanning of FUXA CVE-2026-25895; ~60 instances exposed, main.js overwritten with junk so far.
- Countries
- United States
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-33831 | A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST… | 9.8 | 26% | PoC ×2 | |
CVE-2026-25895+1 related CVE | FUXA: A path traversal vulnerability in FUXA allows an unauthenticated, remote attacker to write arbitrary files to arbitrary locations… | 9.5 group max | 11% | ||
| CVE-2026-64849 | Unauthenticated SSRF in MLflow Exposes Cloud Credentials and Secrets | 9.3 | 10% | KEVPoC ×5 | KEV |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Aug 18, 2026 Vulnerability / Artificial Intelligence Two critical vulnerabilities impacting MLflow, an open-source artificial intelligence (AI) platform, and FUXA, an open-source, web-based SCADA / HMI software built for operational technology (OT) and industrial automation, are witnessing malicious scanning and exploitation efforts.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.