Critical NASA AIT-GUI Flaw Lets Unauthenticated Attackers Issue Spacecraft Commands
Thu Aug 20 2026
Open Source
Vulnerability
cybersecuritynews.com
A critical security flaw in NASA/JPL’s open-source AMMOS Instrument Toolkit GUI (AIT-GUI) could let an unauthenticated attacker send live commands to spacecraft and scientific instruments, run arbitrary scripts, and execute command sequences without ever logging in. Security researcher Yuval Elbar of Cycode disclosed an issue rated 9.4 on the CVSS v3.1 scale on August 13, […]
The post Critical NASA AIT-GUI Flaw Lets Unauthenticated Attackers Issue Spacecraft Commands appeared first on Cyber Security News.