Two significant vulnerabilities have been identified in MLflow, an open-source AI platform, and FUXA, a web-based SCADA/HMI software used in industrial automation. These flaws are currently being targeted by cyber attackers.
Overview of Vulnerabilities
According to reports from watchTowr and VulnCheck, the vulnerabilities include CVE-2026-64849, a Server-Side Request Forgery (SSRF) in MLflow, and CVE-2026-25895, a path traversal flaw in FUXA. The SSRF vulnerability affects MLflow versions below 3.15.0, allowing attackers to access cloud metadata endpoints and retrieve sensitive data. Meanwhile, the FUXA flaw impacts versions up to 1.2.9, enabling remote code execution by writing arbitrary files on the server.
Details on Exploitation
watchTowr reported that attackers are using CVE-2026-64849 to interact with internal cloud services and extract credentials. This exploitation was detected shortly after the vulnerability was publicly disclosed on August 17, 2026. The flaw exploits MLflow’s model-registry webhooks, bypassing previous security measures due to the way web redirects are handled.
For the FUXA vulnerability, VulnCheck observed malicious activities starting August 18, 2026, with a single IP actively scanning for vulnerable systems. Although no remote code execution payloads have been deployed yet, attackers have attempted to overwrite critical files like main.js.
Security Recommendations
Organizations using MLflow should urgently apply patches to affected systems, monitor for signs of compromise, and verify if any sensitive data has been exposed. Similarly, FUXA users need to secure their installations and remain vigilant against potential threats.
Previous vulnerabilities in FUXA, such as CVE-2026-25939 and CVE-2023-33831, have shown ongoing exploitation, highlighting the persistent risks associated with unpatched systems.
In conclusion, the exploitation of these vulnerabilities underscores the importance of timely security updates and careful monitoring of system activities to protect against unauthorized data access and potential threats.
