Critical NASA/JPL Software Flaw Allows Unauthorized Spacecraft Command

• •NASA/JPL's AIT-GUI software exposes critical command endpoints without authentication.
• •The vulnerability allows unauthorized access to spacecraft operations, posing significant risks.
• •Cycode researchers discovered the flaw, highlighting the need for immediate security measures.

A critical vulnerability in NASA/JPL's AIT-GUI software was discovered, allowing unauthorized command of spacecraft. The open-source web console, which operates instruments for space missions, exposes command endpoints without any security measures, including authentication or CSRF protection. This flaw was identified by researchers from Cycode, who noted that the HTTP server starts without any form of access control. The potential impact could be severe, as it may allow malicious actors to manipulate spacecraft operations. No specific CVEs were mentioned in the articles, but the vulnerability raises significant concerns about the security of space mission operations. As of now, there are no reports of exploitation, but the lack of security measures poses a high risk. Immediate action is recommended to secure the affected systems.