Path Traversal Vulnerability in AMMOS Instrument Toolkit by NASA

CVE-2026-47731

What is CVE-2026-47731?

The AMMOS Instrument Toolkit, previously known as BLISS, presents a security issue where its Binary Stream Capture (BSC) component allows unauthenticated access to an HTTP API. This vulnerability enables remote attackers to exploit path-related form fields, leading to potential directory traversal attacks. By manipulating the logging path, an attacker could append malicious data to arbitrary files within the system, leveraging the permissions of the ait-bsc process. Access via a public network or a compromised internal network could facilitate such attacks, making it critical for users to upgrade to the latest version to mitigate these risks.

References