Critical NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Send Spacecraft Commands

Security researchers at Cycode have disclosed a chain of vulnerabilities in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit. The flaws, tracked as GHSA-p9r8-2q67-fp86 and rated 9.4 on the CVSS v3.1 scoring system, could allow an unauthenticated attacker to issue arbitrary commands to the software's spacecraft and instrument command bus.

AIT-GUI is part of the AMMOS Instrument Toolkit (AIT), a suite of tools used by NASA/JPL and other space missions for deep space network operations, telemetry processing, and command uplink. The console provides a web-based interface for operators to monitor and control spacecraft instruments.

The vulnerability chain, as reported by Cycode, enables an unauthenticated remote attacker to interact with the command bus without credentials. This could potentially allow an attacker to send commands to connected spacecraft or instruments, depending on the deployment configuration. The severity is considered critical due to the potential impact on mission operations.

Specific technical details of the vulnerabilities have not been fully disclosed, and no CVE identifiers have been assigned yet. The advisory is currently tracked under the GitHub Security Advisory (GHSA) ID GHSA-p9r8-2q67-fp86.

At the time of writing, no evidence of active exploitation has been reported. However, given the critical nature of the flaw and the sensitive environment in which AIT-GUI operates, organizations using the software are urged to take immediate action.

NASA/JPL has not yet released a public patch or mitigation guidance. Users are advised to monitor official NASA/JPL advisories and the AIT-GUI repository for updates. In the interim, organizations should restrict network access to AIT-GUI instances and enforce strong authentication mechanisms if possible.

This disclosure highlights the growing importance of securing ground segment software in space operations, as vulnerabilities in such systems can have cascading effects on mission safety and data integrity.