A critical security flaw in NASA/JPL’s open-source AMMOS Instrument Toolkit GUI (AIT-GUI) could let an unauthenticated attacker send live commands to spacecraft and scientific instruments, run arbitrary scripts, and execute command sequences without ever logging in.
Security researcher Yuval Elbar of Cycode disclosed an issue rated 9.4 on the CVSS v3.1 scale on August 13, 2026. This issue has been patched in AIT-GUI version 2.5.2, which was released on August 12, 2026.
AIT-GUI is the browser-based operator console for the AMMOS Instrument Toolkit, a widely used open-source framework for building ground data systems that send commands to spacecraft and instruments and process the telemetry that comes back.
In practical terms, it is the panel an operator uses to click a button and have that action translated into a real command sent to hardware, which is precisely why a routine web application bug becomes so consequential here.
Critical NASA AIT-GUI Flaw
According to the advisory, the AIT-GUI web server reads its configured host setting and then silently discards it, hardcoding the listener to bind on 0.0.0.0 across all network interfaces on port 8080 by default. An operator who deliberately restricts the console to localhost still ends up exposing it to the entire reachable network.
Compounding that exposure, none of the application’s state-changing endpoints enforce authentication, authorization, or cross-site request forgery (CSRF) protection. The POST /cmd endpoint relays whatever command string it receives directly to the spacecraft command bus, while POST /script/run and POST /seq allow server-side script execution and command-sequence execution, respectively.
The latter two endpoints also build filesystem paths from unvalidated user input, opening the door to path traversal outside their intended script and sequence directories. Researchers classified the issues under CWE-306 (missing authentication), CWE-352 (CSRF), and CWE-22 (path traversal).
A separately tracked flaw, CVE-2026-60112, describes a related missing-authentication issue in which an attacker can obtain a valid session by calling Sessions.create() without any credential check, then invoke handle_cmd() to forward arbitrary commands straight to the AIT command bus. That CVE carries a CVSS v3.1 base score of 9.8 and was published on July 28, 2026, ahead of the fuller GHSA disclosure.
Because the vulnerable endpoints accept standard form-encoded POST requests, they qualify as CORS “simple” requests that browsers deliver cross-origin without a preflight check.
That means even a deployment that is firewalled off from the open internet is not necessarily safe: if an operator with browser access to the console simply visits a malicious webpage, that page can silently submit a form that fires commands at the console in the background.
No credentials, no user interaction beyond opening a page, and no direct network exposure are required for this attack path to succeed.
NASA-AMMOS has fixed the flaw in AIT-GUI 2.5.2, and organizations running the software are strongly urged to upgrade immediately and verify the console port is not reachable from untrusted networks.
Cycode’s disclosure also recommends reviewing command and sequence history for any deployment that may have been exposed prior to patching.
For teams maintaining or hardening deployments, the durable fixes include adding authentication, authorization, and CSRF protections to every state-changing route; binding the server to its configured host rather than the hardcoded 0.0.0.0; and confining script and sequence paths using canonicalization checks that mirror a safeguard already present elsewhere in the codebase on the /scripts/load endpoint.
The disclosure underscores a broader lesson for ground systems and operational technology: these platforms inherit the same web application weaknesses seen across ordinary software, but the cost of a successful exploit is measured in real-world hardware actions rather than data breaches.
No CVE had been formally assigned to the GHSA advisory at the time of writing, though a related CVE-2026-60112 has already been logged in the National Vulnerability Database.
Prevent incidents due to slow investigations. Power your Tier 1 with threat intelligence from 15K SOCs: Integrate TI Lookup in your SOC