Authentication Downgrade Vulnerability in NASA CryptoLib

CVE-2026-79954

What is CVE-2026-79954?

NASA CryptoLib version 1.5.0 is affected by an authentication downgrade vulnerability present in the Telecommand (TC) receive path. This flaw allows an attacker to exploit the selection of the Security Association (SA) for SDLS processing based solely on the SPI field within incoming frames. The vulnerability arises because the system does not validate whether the chosen SA is authorized for the corresponding frame's GVCID, allowing potential unauthorized access and control over sensitive commands.

References