A widely used piece of open-source software that helps operators send commands to spacecraft has been found to contain critical security flaws that could let an unauthenticated attacker take control of it. The problems affect AIT-GUI, the browser-based console for NASA’s AMMOS Instrument Toolkit, and were disclosed publicly in mid-August 2026 by researchers at the security firm Cycode.
What the affected software does
The AMMOS Instrument Toolkit, usually shortened to AIT, is an open-source framework built to run ground data systems. In plain terms, a ground data system is the software on the ground that talks to a spacecraft or a scientific instrument. It sends up commands and takes in the stream of telemetry data that comes back down. AIT-GUI is the web-based control panel that operators open in a browser to do this work.
Because AIT is open source, it is not limited to a single mission or agency. It can be picked up and used by universities, research groups, and other organizations building their own ground systems, which is part of why a weakness in it draws attention beyond NASA itself.
The security problems
According to Cycode, the console shipped with a combination of design choices that, taken together, removed the usual barriers an attacker would have to get past. The researchers describe three core issues.
First, the web server was set up to listen on every network interface on the machine by default, on port 8080, rather than only on the local computer. Listening on all interfaces means the console could be reachable from other devices on the same network instead of staying private to the operator’s own machine.
Second, the routes that change the state of the system, including the endpoints used to issue commands, run scripts, and execute command sequences, had no authentication, no authorization checks, and no protection against cross-site request forgery. In practice that means the software did not ask who was making a request or whether they were allowed to make it.
Third, some file paths were built from user input that was not validated, which opened the door to path traversal. That is a technique where an attacker supplies a crafted path to reach files outside the folder the software was supposed to stay within.
Cycode researcher Yuval Elbar summarized the combined effect as “a server that listens on every network interface, asks nobody for a password, and can be steered by any web page.”
What an attacker could do
With those gaps in place, the researchers found that an unauthenticated attacker able to reach the console could issue arbitrary spacecraft and instrument commands through the command endpoint, run server-side scripts through the script endpoint, and execute prepared command sequences. The ability to run server-side scripts, combined with the path traversal weakness, is what pushes the severity so high, because it can lead to code running on the machine hosting the console.
Severity, tracking, and patch status
The flaws are tracked in a GitHub Security Advisory, GHSA-p9r8-2q67-fp86, and carry a CVSS score of 9.4 out of 10, placing them in the critical range. As of publication, no CVE identifier had been assigned to the advisory. The issues affect AIT-GUI through version 2.5.1, and a fixed release, version 2.5.2, has been published.
The 2.5.2 update makes several changes, including binding the server to a local default instead of all interfaces, adding same-origin checks that inspect the Origin and Referer headers of incoming browser requests, and confining script and sequence execution to designated directories. It is worth noting that, according to reporting by The Hacker News, the update does not add authentication to the command, script, or sequence endpoints, so operators still need to make sure the console is not exposed on untrusted networks.
Neither Cycode nor the advisory reported any known real-world exploitation, and no specific missions were named as affected. Infosecurity Magazine reported that it had contacted NASA and its Jet Propulsion Laboratory for comment but had not received a response by the time its article was published.
Why it matters
Ground control software rarely makes headlines, but it sits at a sensitive point in any space operation. The takeaway here is less about a single product and more about a familiar pattern. Software that is meant to run in a trusted, isolated setting is sometimes built as if that isolation can be assumed rather than enforced. When such software binds to every network interface and skips authentication on its most powerful functions, the protection depends entirely on the network around it staying closed. Organizations running AIT-GUI should update to version 2.5.2 and confirm that the console is not reachable from networks they do not control.
Source: Reporting by The Hacker News, “NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands”, with additional details from Infosecurity Magazine. Vulnerability research disclosed by Cycode.
