Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets

Attackers are exploiting vulnerabilities in MLflow and FUXA to steal sensitive information. The flaws in MLflow, an open-source AI platform, and FUXA, a web-based SCADA/HMI software, are being targeted by malicious actors. Specifically, a vulnerability in MLflow is being used to exploit a server-side request forgery flaw. Reports from watchTowr and VulnCheck have identified these vulnerabilities as being actively scanned and exploited. The exploitation of the MLflow vulnerability allows attackers to steal cloud credentials and secrets.