Critical Flaw in NASA/JPL Open-Source Spacecraft Command Software Allowed Unauthenticated Command Execution

August 22, 2026 • Source: NewsAPI.org • 35 words, ~1 min read

A critical flaw (CVSS 9.4) in NASA/JPL’s AIT-GUI let anyone send unauthenticated commands to spacecraft instruments. Cycode researchers found that AIT-GUI, the browser-based operator console in NASA/JPL open-source AMMOS Instrument Toolkit, shipped with no au…

This article is best viewed with JavaScript enabled. Visit: https://10alert.com/article/critical-flaw-in-nasajpl-open-source-spacecraft-command-software-allowed-60eba8c4