AIThe Hacker Newsabout 2 hours ago
MLflow, FUXA Flaws Exploited for Credential Theft
1 min read
Attackers are exploiting CVE-2026-64849 in MLflow to proxy requests and steal cloud credentials from metadata services, bypassing prior fixes via web redirects. Separately, CVE-2026-25895 in FUXA enables unauthenticated file writes and remote code execution, with about 60 exposed installations.
Level
Hype check
Tap to vote and see what everyone thinks.
