CVE-2026-47731 NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)

🗓️ 21 Jul 2026 21:36:22Reported by GoogleType

osv

osv🔗 osv.dev👁 2 Views

CVE-2026-47731 enables path traversal in AMMOS Instrument Toolkit BSC, unauthenticated file append.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2026-47731	19 May 202622:10	–	circl
CVE	CVE-2026-47731	21 Jul 202621:36	–	cve
Cvelist	CVE-2026-47731 NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)	21 Jul 202621:36	–	cvelist
EUVD	EUVD-2026-47011	21 Jul 202621:36	–	euvd
Github Security Blog	NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)	5 Jun 202618:11	–	github
NVD	CVE-2026-47731	21 Jul 202622:17	–	nvd
OSV	GHSA-P462-PRXW-MJX4 NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)	5 Jun 202618:11	–	osv
OSV	PYSEC-2026-265 NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)	29 Jun 202611:50	–	osv
Positive Technologies	PT-2026-47089	5 Jun 202600:00	–	ptsecurity
Positive Technologies	PT-2026-53362	29 Jun 202600:00	–	ptsecurity

Source	Link
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47731.json
github	www.github.com/NASA-AMMOS/AIT-Core/releases/tag/2.6.1
github	www.github.com/NASA-AMMOS/AIT-Core/releases/tag/3.1.1
github	www.github.com/NASA-AMMOS/AIT-Core/security/advisories/GHSA-p462-prxw-mjx4
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-47731

22 Jul 2026 05:32Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.1

EPSS0.00163

path traversal ammos instrument toolkit file append unauthenticated access binary stream capture web service