SECURITYTHE HACKER NEWS
NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands
Security researchers at Cycode disclosed a chain of flaws in AIT-GUI, the operator console for NASA/JPL's open-source AMMOS Instrument Toolkit. These flaws allow an unauthenticated attacker to issue arbitrary commands to the software’s spacecraft and instrument command bus. The vulnerability was tracked as GHSA-p9r8-2q67-fp86 and rated 9.4 on CVSS v3.1.
Mentioned
Related Signal
Adjacent reporting
- Vuln in Google’s Antigravity AI agent manager could escape sandbox, give attackers remote code execution
- Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes
- Google Fixes AI Coding Tool Flaw That Let Attackers Execute Malicious Code: Report
- Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw
- GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents