GHSA-P462-PRXW-MJX4 NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)

🗓️ 05 Jun 2026 18:11:27Reported by GoogleType

osv🔗 osv.dev👁 14 Views

Unauthenticated interface enables path traversal to log to arbitrary paths and append data on the Binary Stream Capture server.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2026-47731	19 May 202622:10	–	circl
CVE	CVE-2026-47731	5 Jun 202618:11	–	cve
Github Security Blog	NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)	5 Jun 202618:11	–	github
OSV	PYSEC-2026-265 NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)	29 Jun 202611:50	–	osv
Positive Technologies	PT-2026-47089	5 Jun 202600:00	–	ptsecurity
Positive Technologies	PT-2026-53362	29 Jun 202600:00	–	ptsecurity
PyPA	NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)	29 Jun 202611:50	–	pypa
Snyk	Directory Traversal	5 Jun 202618:11	–	snyk
vulnersOsv	ait-dsn (=2.0.0), ait-gui (>=2.4.0 <=2.4.1) potentially affected by CVE-2026-47731 via ait-core (>=2.3.5 <=2.5.2)	5 Jun 202618:11	–	vulnersosv
vulnersOsv	ait-dsn (=2.0.0), ait-gui (>=2.4.0 <=2.4.1) potentially affected by CVE-2026-47731 via ait-core (>=2.3.5 <=2.5.2)	29 Jun 202611:50	–	vulnersosv

Source	Link
github	www.github.com/NASA-AMMOS/AIT-Core/security/advisories/GHSA-p462-prxw-mjx4
github	www.github.com/NASA-AMMOS/AIT-Core
github	www.github.com/NASA-AMMOS/AIT-Core/releases/tag/2.6.1
github	www.github.com/NASA-AMMOS/AIT-Core/releases/tag/3.1.1

29 Jun 2026 12:26Current

6Medium risk

Vulners AI Score6

CVSS 3.19.1

EPSS0.00163