Infosecurity-Magazine Critical Vulnerability in NASA Ground Control Software Allows Unauthenticated Access
Article Content
- •NASA's AIT-GUI software has a critical vulnerability allowing unauthenticated access.
- •The flaw affects versions up to 2.5.1 and has a CVSS score of 9.4.
- •Attackers can exploit the vulnerability remotely via a malicious webpage.
A critical vulnerability in NASA's AMMOS Instrument Toolkit (AIT-GUI) software, tracked as GHSA-p9r8-2q67-fp86, allows unauthenticated attackers to issue commands to spacecraft and execute scripts. The flaw affects AIT-GUI versions up to 2.5.1 and has a CVSS rating of 9.4. Discovered by Cycode researcher Yuval Elbar on August 18, 2026, the vulnerability allows attackers to exploit access-control failures through an open web server interface. Attackers can gain access without being on the same network, potentially uploading malware via a malicious webpage. AIT-GUI 2.5.2 has been released to address this issue. The vulnerability also enables remote code execution through a chained exploit involving the /tlm/query endpoint. Administrators are advised to upgrade to the latest version and review security practices.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (9)
Following this threat?
Track NASA in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active… 
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…