NASA urged to strengthen cybersecurity amid spacecraft software vulnerabilities

cybersecurity spacecraft security NASA risk management software vulnerability

The U.S. Government Accountability Office (GAO) has urged NASA to strengthen its cybersecurity risk management following concerns regarding increasing threats to spacecraft and space systems. A GAO report highlights that NASA has yet to implement a priority recommendation to conduct an organization-wide cybersecurity risk assessment. The agency currently has 46 open recommendations, none of which have been implemented since August 2025.

Separately, NASA has patched a security vulnerability in its AIT-GUI software, an open-source ground control tool used to monitor spacecraft and transmit instructions. Cybersecurity researcher Yuval Elbar of Cycode discovered that the flaw allowed unauthenticated users to execute commands, run scripts, or launch command sequences on mission control systems. The vulnerability existed in versions up to 2.5.1 of the software and could be exploited without direct login access if the server was exposed beyond intended boundary controls.

Entities

Cycode · NASA · U.S. Government Accountability Office

Sources

GAO urges NASA to strengthen cybersecurity risk management as spacecraft, space systems face growing cyber threats [cybernoz.com]

19 days ago

NASA patches security flaw in spacecraft control tool [worldstockmarket.net]

21 days ago