Loading story…
A critical vulnerability in NASA/JPL’s open-source AMMOS Instrument Toolkit GUI (AIT-GUI) could allow unauthenticated attackers to issue spacecraft and instrument commands, execute server-side scripts, and launch command sequences through exposed web endpoints. The flaw, tracked as GHSA-p9r8-2q67-fp86 and rated CVSS 9.4, affects AIT-GUI versions through 2.5.1 and was fixed in 2.5.2. Researchers said the application binds its HTTP server to 0.0.0.0, effectively exposing the interface on all network interfaces, while sensitive API routes lack authentication, authorization, and CSRF protections.
The vulnerable endpoints reportedly include POST /cmd for arbitrary command relay, POST /script/run for server-side script execution, and POST /seq for sequence execution, with the latter two also affected by path traversal due to unsafe path handling. Because the endpoints accept form-encoded requests, an operator visiting a malicious website could be induced to send cross-origin requests from their browser, enabling attacks even against host-local or otherwise firewalled deployments. Security researchers urged users to upgrade to AIT-GUI 2.5.2 immediately and keep the service port off untrusted networks.
See affected versions and whether adversaries are exploiting it.
4 events from the most recent confirmed update back to the earliest known activity.
The Hacker News reported that tagged AIT-GUI 2.5.2 still creates a session without credential checks and accepts requests to command-related endpoints with that session cookie. It confirmed the release narrows listening scope and blocks browser-driven cross-origin requests, but does not add authentication to the command, script, or sequence endpoints.
Cycode researcher Yuval Elbar disclosed a critical vulnerability in NASA's open-source AMMOS Instrument Toolkit GUI (AIT-GUI) that could let unauthenticated attackers issue spacecraft and instrument commands, execute server-side scripts, and run command sequences. The issue is tracked as GHSA-p9r8-2q67-fp86 and was rated CVSS 9.4.
A related AIT-GUI vulnerability, CVE-2026-60112, was published describing a missing-authentication flaw that lets attackers create a valid session without credential checks and forward arbitrary commands to the AIT command bus. The reference says the issue carries a CVSS v3.1 score of 9.8.
The vulnerability affecting AIT-GUI versions through 2.5.1 was fixed in version 2.5.2. The flaw involved the web server binding to all interfaces and lacking authentication, authorization, CSRF protections, and proper path confinement on sensitive routes.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
6 references tracked. Mallory keeps watching after this page renders.
securityaffairs.com
Open sourcescworld.com
Open sourcecybersecuritynews.com
Open sourcethehackernews.com
Open sourcecycode.com
Open sourceinfosecurity-magazine.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Two application vulnerabilities have exposed AGiXT and Bugsink servers to filesystem-level attacks that can lead to full host compromise. In AGiXT, advisory `GHSA-5gfj-64gh-mgmw` describes an authenticated path traversal flaw in the Essential Abilities Extension, rated **CVSS 8.8**, that lets an attacker escape intended directories and access files with the permissions of the AGiXT process. The issue allows arbitrary read, write, and delete operations against sensitive targets including environment files, configuration data, database credentials, cryptographic keys, `/etc/shadow`, and `.ssh/id_rsa`, creating high risk to confidentiality, integrity, and availability. A separate flaw tracked as `CVE-2026-40162` affects Bugsink and enables authenticated arbitrary file write or overwrite within the application's runtime permissions, with a **CVSS 7.1** rating. The weakness can be used to overwrite Python source files or module initialization scripts so attacker-controlled code executes on restart or when a new worker is spawned, effectively turning file access into remote code execution. Both disclosures warn that deployments running with elevated privileges or broad filesystem access face the greatest danger, including persistence through locations such as cron directories, `.ssh/authorized_keys`, or application package paths, as well as exposure of secrets, telemetry, and backend credentials.
Jun 29, 2026
A critical command injection vulnerability, tracked as CVE-2025-67511, has been identified in the open-source Cybersecurity AI (CAI) framework, which is used for building and deploying AI-powered offensive and defensive automation. The flaw exists in the `run_ssh_command_with_credentials()` function, where only the password and command inputs are properly escaped, leaving the username, host, and port parameters vulnerable to injection. This allows attackers to craft malicious inputs that can execute arbitrary shell commands via AI agents, potentially compromising affected systems remotely. The vulnerability affects all CAI versions up to and including 0.5.9, and no official fix or patch is available as of the latest reports. The issue is classified as critical, with a CVSS v3.1 base score of 9.6 or higher, reflecting the high risk to confidentiality, integrity, and availability. Exploitation requires user interaction, likely through the AI agent's command execution interface, but does not require authentication or elevated privileges. Security advisories recommend that organizations using CAI implement compensating controls and monitor for suspicious activity, as the vulnerability is remotely exploitable and no mitigation has been released. The lack of a patch increases the urgency for defensive measures to prevent potential exploitation in production environments.
Sep 4, 2026
A critical vulnerability tracked as **`CVE-2026-53451`** exposed **Ground Station** to unauthenticated arbitrary file write through path traversal in the `save-waterfall-snapshot` Socket.IO command. In versions prior to **`0.4.13`**, attacker-controlled `snapshotName` input could escape the intended snapshots directory and write base64-decoded content to arbitrary filesystem paths. The issue affected the browser-based platform used for satellite tracking, SDR reception, hardware control, and telemetry decoding, and carried a **CVSS 9.8** rating because it was remotely exploitable without privileges or user interaction. The flaw could be chained with the unauthenticated `update-app-config` operation and `restart_service` to load a malicious logging YAML configuration, allowing `logging.config.dictConfig` to execute attacker-controlled code with service privileges and potentially force the application into a persistent crash loop. The vendor addressed the issue in **`v0.4.13`** and in commit **`5649905`**, which added a `pathguard` module, blocked absolute paths and traversal sequences in snapshot names, and enforced trusted-root validation for snapshot handling and SigMF playback files including `.sigmf-meta` and `.sigmf-data`. Security tests were also added to ensure traversal attempts are rejected and file access remains confined to approved directories.
Aug 20, 2026