NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

A security vulnerability in NASA/JPL's AMMOS Instrument Toolkit's AIT-GUI browser-based operator console allows unauthenticated attackers to issue arbitrary commands to spacecraft and instruments. Researchers at Cycode discovered a chain of flaws, initially identified by Saidakbarxon Maxsudxonov (CVE-2026-60112) and la…