NASA’s Open-Source Ground Systems Expose Spacecraft to Unauthenticated Command Takeover

Security firm Cycode has disclosed a critical vulnerability in AIT-GUI, the browser-based operator console for NASA/JPL’s open-source AMMOS Instrument Toolkit (AIT), a framework for building ground data systems that send commands to instruments and spacecraft and process the telemetry that comes back. The issue is tracked as GHSA-p9r8-2q67-fp86, rated Critical with a CVSS score of 9.4, and is fixed in AIT-GUI 2.5.2, according to Cycode’s write-up. No CVE had been assigned at the time of publication.

Four Ordinary Web Bugs, One High-Value Target

AIT-GUI starts an HTTP server, on port 8080 by default, with no authentication, no authorization and no CSRF protection on any state-changing endpoint. Cycode found that the server reads the configured host setting and then ignores it, binding to all interfaces (0.0.0.0). An operator who sets the console to localhost still exposes it to the entire reachable network.

The POST /cmd endpoint relays whatever arrives in its command field straight to the command bus. Two other endpoints, /seq and /script/run, build file paths from unvalidated input, allowing path traversal to run sequences or scripts outside their intended directories. A correct path-confinement check already existed elsewhere in the same file.

Even a firewalled or local-only deployment is exposed. Because the endpoints accept form-encoded requests, which browsers send cross-origin without a CORS preflight, a malicious web page opened by an operator with access to the console could issue commands through the operator’s browser. “No step requires a memory-corruption primitive, an auth bypass, or a novel exploit technique. It is four well-understood web weaknesses composed against a very high-value target,” Cycode wrote.

Found With AI-Assisted Analysis

Cycode said the bug was found by a human researcher working with AI-assisted code analysis, with the tool reading the unfamiliar codebase end to end and flagging suspicious patterns, and the researcher confirming which leads were real and exploitable. None of the findings required running the software first.

Cycode’s advice is to upgrade to AIT-GUI 2.5.2 and keep the port off untrusted networks. More broadly, the case shows why operational technology and aerospace ground software deserve the same web-security scrutiny as public-facing apps. When an unauthenticated POST can issue instrument commands, basic controls such as authentication, CSRF tokens and loopback-only binding are mission-critical.