threat-intel
Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets
Critical
Summary
Two critical vulnerabilities are being actively exploited to steal cloud credentials and secrets. MLflow (versions < 3.15.0) is experiencing SSRF attacks, allowing attackers to access cloud metadata and exfiltrate sensitive data. Simultaneously, FUXA (versions <= 1.2.9) is under attack due to a path traversal vulnerability, enabling remote code execution attempts.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data