Live › vulnerability › CVE-2024-35057
Go to dashboardNASA AIT-Core, a Python package for telemetry and command handling, can be made to execute arbitrary code through a crafted packet. An attacker who can send that packet to a vulnerable instance gets code execution on the host running it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:16 UTC, 0h before NVD. All times on this page are UTC.
Teams running the pypi package ait-core at version 2.5.2 or earlier, most likely in ground-system or telemetry setups. The sources do not say which configurations expose the packet handling, so whether a given deployment is reachable is unknown.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| ait-core | pypi | <= 2.5.2 | – |
| nasa ait core | vendor | <= 2.5.2 | – |
pip show ait-core and look at the version; the sources say versions up to 2.5.2 are affected.ait-core to a version newer than 2.5.2; the sources do not name the exact fixed version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An issue in NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via a crafted packet.
This page as .md · .json · in your agent: get_signal("CVE-2024-35057")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.