MLflow SSRF Exploitation Targets Cloud Secrets as FUXA Scanning Begins
Summary
watchTowr reports MLflow CVE-2026-64849 exploitation aimed at cloud credentials and secrets. VulnCheck observed scanning for FUXA CVE-2026-25895, including file-overwrite attempts; no RCE payloads were observed.
Key points
- MLflow CVE-2026-64849 is an unauthenticated SSRF flaw affecting versions before 3.15.0.
- watchTowr says attackers are using the flaw to reach cloud metadata services and attempt to extract credentials and secrets.
- FUXA CVE-2026-25895 affects versions 1.2.9 and earlier and allows unauthenticated remote file writes through path traversal.
- VulnCheck observed scanning for vulnerable FUXA instances starting August 18, 2026; requests attempted to overwrite main.js with junk data, and no RCE payloads had been observed.
- The article reports active exploitation efforts involving FUXA CVE-2026-25939 and CVE-2023-33831 as well.
- Organizations are advised to patch exposed MLflow systems, review audit logs, and check for exposed credentials.
Article Details
- Vulnerability Types
- Unauthenticated server-side request forgery (SSRF)
- Missing authentication for a critical function
- Path traversal
- Severity
- Critical (CVSS 9.3 for CVE-2026-64849; CVSS 9.5 for CVE-2026-25895)
- Affected Versions
- MLflow versions before 3.15.0
- FUXA versions 1.2.9 and earlier
- Exploitation Status
- active
- Exploit Availability
- unknown
- Patch Status
- unknown
MITRE ATT&CK
T1190 · Exploit Public-Facing ApplicationAttackers are exploiting the MLflow SSRF flaw and scanning for exposed vulnerable MLflow and FUXA instances.T1552.005 · Cloud Instance Metadata APIAttackers exploit the MLflow SSRF flaw to reach cloud metadata services and extract cloud credentials and secrets.
CVE
People
Caitlin CondonVulnCheck vice president of research who reported scanning for CVE-2026-25895 and an attempt to overwrite FUXA's main.js; she said no RCE payloads had been dropped.Yordan GanchevWatchTowr principal threat intelligence specialist who described how the MLflow flaw proxies requests through affected systems to internal services.
Products
FUXAAttackers are actively scanning and exploiting critical flaws in MLflow and FUXA, with MLflow abuse targeting cloud metadata services to steal credentials and secrets.MLflowAttackers are actively scanning and exploiting critical flaws in MLflow and FUXA, with MLflow abuse targeting cloud metadata services to steal credentials and secrets.
Industries
Industrial automationFUXA, an open-source, web-based SCADA / HMI software built for operational technology (OT) and industrial automation, are witnessing malicious scanning and exploitation efforts.Operational technologyintelligence (AI) platform, and FUXA, an open-source, web-based SCADA / HMI software built for operational technology (OT) and industrial automation, are witnessing malicious scanning and exploitation efforts.