Skip to main content
See every side of every news story
Get Started
SubscribeLogin
Published • loading... • Updated

Critical Flaw in NASA/JPL Open-Source Spacecraft Command Software Allowed Unauthenticated Command Execution

Summary by cybernoz.com
Critical Flaw in NASA/JPL Open-Source Spacecraft Command Software Allowed Unauthenticated Command Execution Pierluigi Paganini August 22, 2026 A critical flaw (CVSS 9.4) in NASA/JPL’s AIT-GUI let anyone send unauthenticated commands to spacecraft instruments. Cycode researchers found that AIT-GUI, the browser-based operator console in NASA/JPL open-source AMMOS Instrument Toolkit, shipped with no authentication, no session checks…

4 Articles

La RazónLa Razón
Lean Right

An Attacker Could Take Command of a NASA Ship From the Browser: the Failure Allowed to Execute Commands and Sequences without Authentication

A vulnerability in a NASA control tool made it possible to send commands and execute sequences without logging in, a particularly serious failure to be software designed to communicate with ships and instruments

·Madrid, Spain
Read Full Article
unsafe.shunsafe.sh
+2 Reposted by 2 other sources

Critical Flaw in NASA/JPL Open-Source Spacecraft Command Software Allowed Unauthenticated Command Execution

Critical Flaw in NASA/JPL Open-Source Spacecraft Command Software Allowed Unauthenticated Command Execution

Read Full Article
Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/yearSubscribe

Bias Distribution

  • 100% of the sources lean Right
100% Right

Factuality Info Icon

To view factuality data please Upgrade to Premium

Ownership

Info Icon

To view ownership data please Upgrade to Vantage

La Razón broke the news in Madrid, Spain on Saturday, August 22, 2026.
Too Big Arrow Icon
Sources are mostly out of (0)

Similar News Topics

Software icon

Software

NASA icon

NASA

Pasadena, California icon

Pasadena, California

News
Feed Dots Icon
For You
Search Icon
SearchBlindspot LogoBlindspotLocal