Vulnerabilidades do Nasa Fprime-gds
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Nasa Fprime-gds: 1 registro(s), com versões afetadas e correções.
CVE-2026-72577
Crítica · 9.8
CWE-306 10/08/2026
NASA fprime-gds - Missing Authentication and Path Traversal Enable Unauthenticated RCE and Spacecraft Command Injection
Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code execution on the ground station host and inject arbitrary commands to connected spacecraft. The Flask application in src/fprime_gds/flask/app.py applies no authentication to any endpoint.