Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets

Two critical vulnerabilities have been found in MLflow and FUXA software, allowing attackers to steal cloud credentials and execute remote code. Malicious actors are actively scanning and exploiting these flaws shortly after their disclosure.