Executive Summary
watchTowr and VulnCheck report exploitation of a critical MLflow SSRF to steal cloud credentials and secrets, plus attacks on FUXA SCADA software.
What Happened
Two critical vulnerabilities impacting MLflow, an open-source artificial intelligence (AI) platform, and FUXA, an open-source, web-based SCADA / HMI software built for operational technology (OT) and industrial automation, are witnessing malicious scanning and exploitation efforts. According to independent reports from watchTowr and VulnCheck, the vulnerabilities in question are as follows -
Affected Products
- MLflow
- FUXA
Vulnerability / Attack Technique
SSRF in an AI/ML platform
Technical Mechanism
Internal endpoints reachable via the server leak credentials.
AI Security Category
LLM03:2025 Supply Chain
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
ML platforms often sit next to cloud credentials. RealGround analysis: keep MLflow private and least-privileged.
Recommended Controls
- Update MLflow
- Restrict MLflow network exposure
Related RealGround Service
AI Agent SBOM and LLM Mapping · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/08/attackers-exploit-mlflow-ssrf-flaw-to.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.