{"id":"CVE-2024-35056","kind":"vulnerability","aliases":["CVE-2024-35056","GHSA-gpgj-xrgw-8mx2"],"related":[],"title":"NASA AIT-Core vulnerable to SQL Injection","description":"NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the `query_packets` and `insert` functions.","summary":"NASA AIT-Core, a Python package for ground systems telemetry, builds SQL statements from input in its query_packets and insert functions without parameterization. An attacker who can supply input to those functions can read or change the database contents.","severity":"critical","cvss":9.8,"epss":0.00608,"exploited":false,"exploited_at":null,"products":[{"name":"ait-core","fixed":[],"affected":"<= 2.5.2","ecosystem":"pypi"},{"name":"nasa ait core","fixed":[],"affected":"<= 2.5.2","ecosystem":"vendor"}],"ecosystems":["pypi","vendor"],"tags":["ait-core","cwe-89","databases","nasa","package","python"],"not_affected_if":["not-using-ait-core"],"how_to_check":"- Run `pip show ait-core` and compare the version against `2.5.2`\n- Search your code for calls to `query_packets` or `insert` from ait-core that take untrusted input","fix":"- Upgrade `ait-core` to a version newer than `2.5.2`; the fixed version is unknown from the sources\n- Until upgraded, pass only trusted values to `query_packets` and `insert`","status":"open","published_at":"2024-05-21T18:15:09+00:00","first_seen_at":"2026-10-26T21:16:46+00:00","triaged_at":"2026-10-26T21:16:58+00:00","updated_at":"2026-10-26T21:20:32+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-26T21:16:58Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade `ait-core` to a version newer than `2.5.2`; the fixed version is unknown from the sources\n- Until upgraded, pass only trusted values to `query_packets` and `insert`","reach":"unknown","title":"NASA AIT-Core: SQL injection in query and insert functions","impact":"high","summary":"NASA AIT-Core, a Python package for ground systems telemetry, builds SQL statements from input in its query_packets and insert functions without parameterization. An attacker who can supply input to those functions can read or change the database contents.","category":"package","nicknames":[],"who_cares":["python","ait-core","nasa","databases"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Attacker reads or alters database contents through injected SQL","analyst_note":"Check the GHSA-gpgj-xrgw-8mx2 advisory for the fixed version and whether the injection is reachable over a network interface.","how_to_check":"- Run `pip show ait-core` and compare the version against `2.5.2`\n- Search your code for calls to `query_packets` or `insert` from ait-core that take untrusted input","needs_analyst":true,"not_affected_if":["not-using-ait-core"],"who_is_affected":"Teams that use the pypi package ait-core at version 2.5.2 or earlier and pass externally influenced values into its query_packets or insert functions. Systems that use the package only with fixed internal inputs are less exposed, but the sources do not say how far that reduces risk. Teams not using ait-core can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000617,"input_tokens":3312,"output_tokens":571,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-2024':10A,18A '-35056':11A,19A '-89':30B '8mx2':16A 'ait':3A,21A,24A,27B,37B,78C 'ait-cor':2A,26B,36B,77C 'ait-core':20A 'attack':61B 'build':46B 'chang':72B 'contain':84C 'content':75B 'core':4A,22A,25A,28B,38B,79C 'cve':9A,17A 'cwe':29B 'databas':31B,74B 'discov':82C 'function':57B,68B,95C 'ghsa':13A 'ghsa-gpgj-xrgw-8mx2':12A 'gpgj':14A 'ground':43B 'inject':8A,87C 'input':50B,65B 'insert':56B,94C 'multipl':85C 'nasa':1A,23A,32B,35B,76C 'packag':33B,41B 'packet':54B,92C 'parameter':59B 'python':34B,40B 'queri':53B,91C 'read':70B 'sql':7A,47B,86C 'statement':48B 'suppli':64B 'system':44B 'telemetri':45B 'v2.5.2':80C 'via':89C 'vulner':5A,88C 'without':58B 'xrgw':15A","nicknames":[],"mitigations":[],"who_affected":"Teams that use the pypi package ait-core at version 2.5.2 or earlier and pass externally influenced values into its query_packets or insert functions. Systems that use the package only with fixed internal inputs are less exposed, but the sources do not say how far that reduces risk. Teams not using ait-core can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2024-05-21T18:15:09+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"GitHub","poc_count":0,"sources":[{"source":"ghsa","external_id":"GHSA-gpgj-xrgw-8mx2","url":"https://github.com/advisories/GHSA-gpgj-xrgw-8mx2","severity":"critical","published_at":"2024-05-21T18:31:24+00:00","modified_at":"2026-10-26T21:15:31+00:00","first_seen_at":"2026-10-26T21:16:46+00:00","fetched_at":"2026-10-26T21:16:46+00:00","note":null},{"source":"nvd","external_id":"CVE-2024-35056","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-35056","severity":null,"published_at":"2024-05-21T18:15:09+00:00","modified_at":"2026-06-17T07:34:19+00:00","first_seen_at":"2026-10-26T21:20:32+00:00","fetched_at":"2026-10-26T21:20:32+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}