Published Aug 18, 2026, 1:44 PM ET · Updated 3 months ago · 1 source

Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets

The Hacker News
The Hacker News
·
Original Report

Two critical vulnerabilities impacting MLflow, an open-source artificial intelligence (AI) platform, and FUXA, an open-source, web-based SCADA / HMI software built for operational technology (OT) and industrial automation, are witnessing malicious scanning and exploitation efforts. According to independent reports from watchTowr and VulnCheck, the vulnerabilities in question are as follows -