A security vulnerability in open-source ground control software used by NASA allowed unauthenticated users to execute commands and run scripts on spacecraft systems, according to cybersecurity researcher Yuval Elbar of Cycode.
The flaw affected versions up to 2.5.1 of AIT-GUI, a web interface component of the AMMOS Instrument Toolkit used by ground controllers to monitor spacecraft systems and transmit instructions to instruments and small space probes.
Vulnerability details and exploit vectors
Elbar discovered that several of the software's most sensitive operational functions could be accessed without password authentication. The server accepted incoming connections across multiple network interfaces, creating security risks if an installation was exposed beyond intended boundary controls.
Anyone with network access to an unpatched server could trigger functions designed to dispatch live commands, run arbitrary scripts, or launch pre-stored command sequences. The system also failed to properly restrict file paths, opening additional avenues for function misuse.
An attacker did not need direct login access to the server to exploit the system. Missing request verification protections left the interface vulnerable to cross-site requests, meaning an operator visiting a malicious web page could unwittingly cause their browser to send unauthorized commands to AIT-GUI.
Access limits and real-world impact
Security analysts emphasized a key distinction between the technical vulnerability and the potential for remote control over active missions. To exploit the flaw, a vulnerable software installation had to be accessible directly or via an authorized user's browser, and it had to be connected to an active mission operating system.
The National Aeronautics and Space Administration relies on ground control toolkits like AMMOS to manage telemetry, tracking, and command operations for planetary probes and orbital instruments. As space agencies adopt web-based and open-source tools to streamline ground operations, securing browser interfaces against remote command injection has become critical.
The security discovery comes as NASA works to expand autonomous navigation and operational capabilities across its spacecraft fleet. Recent initiatives include systems such as FALCON, designed to help spacecraft determine their location without GPS relying on satellites and nearby orbital objects.
Remediation and NASA directives
Developers resolved the vulnerability with the release of version 2.5.2 of the AIT-GUI software.
Following the patch, NASA instructed staff members to perform regular checks verifying that access ports remain closed to untrusted networks. Ground operators were also directed to review command history logs to identify any potential past exposure to the vulnerability.
