NASA AIT-GUI Vulnerability Allows Unauthenticated Command Execution

NASA AIT-GUI Vulnerability Allows Unauthenticated Command Execution

First seen 20 Aug 2026, 21:12 UTC •Infosecurity-MagazineCybersecuritynews •85% similarity •72.6

Article Content

Browse articles
ThreatCluster

A critical vulnerability in NASA's open-source AMMOS Instrument Toolkit GUI (AIT-GUI) has been identified, enabling unauthenticated attackers to send commands to spacecraft and instruments, execute scripts, and run command sequences. The flaw, tracked as GHSA-p9r8-2q67-fp86, received a CVSS score of 9.4 and affects AIT-GUI versions up to 2.5.1. Discovered by Cycode researcher Yuval Elbar, the vulnerability is due to the software's web server configuration, which does not enforce authentication or CSRF protection on state-changing endpoints. This allows attackers to exploit the flaw remotely, even without direct access to the server. A patch has been released in version 2.5.2 to address the issue. NASA has been contacted for further comments regarding the vulnerability.

Key Points: • NASA's AIT-GUI has a critical vulnerability allowing unauthenticated command execution. • The flaw affects versions up to 2.5.1 and has a CVSS score of 9.4. • A patch has been released in version 2.5.2 to mitigate the vulnerability.

ThreatCluster AI How this analysis works

Timeline

2026-08-13
Vulnerability disclosed by researcher
Yuval Elbar of Cycode disclosed a critical flaw in NASA's AIT-GUI, allowing unauthorized command execution.
Cybersecuritynews
2026-08-18
Infosecurity Magazine reports on the flaw
Infosecurity Magazine published details about the AIT-GUI vulnerability and its implications for NASA's operations.
Infosecurity-Magazine
2026-08-18
Patch released for AIT-GUI
NASA released version 2.5.2 of AIT-GUI to fix the critical vulnerability identified by Cycode.
Infosecurity-Magazine

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Ait-gui Ammos Instrument Toolkit