Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets

Two critical vulnerabilities impacting MLflow, an open-source artificial intelligence (AI) platform, and FUXA, an open-source, web-based SCADA / HMI software built for operational technology (OT) and industrial automation, are witnessing malicious scanning and exploitation efforts. According to independent reports from watchTowr and VulnCheck, the vulnerabilities in question are as follows -

Fact: Researchers from watchTowr and VulnCheck report active scanning and exploitation of critical vulnerabilities in MLflow, an open‑source AI platform, and FUXA, an open‑source SCADA/HMI tool used in OT and industrial automation. Fact: The MLflow flaw involves SSRF, which can be used to steal cloud credentials and other secrets from integrated infrastructure. RealGround analysis: These issues highlight AI supply chain risk, where vulnerabilities in third‑party AI tooling can directly expose cloud environments and operational technology to compromise. RealGround analysis: Organizations using MLflow or similar AI platforms should treat them as high‑value infrastructure components, integrate them into SBOM and vulnerability management processes, and enforce strict network segmentation and credential isolation around AI tooling.