CVE-2026-60112

AMMOS Instrument Toolkit (AIT) GUI before 2.5.1 has a missing authentication flaw in Sessions.create(), enabling an unauthenticated network attacker to obtain a valid session and issue arbitrary spacecraft commands. After session issuance, handle_cmd() can forward commands to the AIT command bus ...