EUVD-2026-18805
GHSA-crxq-rm37-648f
Severity by source
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (vuldb) · only source for this CVE.
CVSS VectorVendor: vuldb
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability has been found in NASA cFS up to 7.0.0. The impacted element is the function pickle.load of the component Pickle Module. Such manipulation leads to deserialization. The attack needs to be performed locally. The attack requires a high level of complexity. The exploitability is regarded as difficult. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
AnalysisAI
Unsafe deserialization in NASA cFS Pickle Module (versions up to 7.0.0) allows authenticated local attackers with low privileges to trigger remote code execution or information disclosure through the pickle.load() function. The vulnerability requires high attack complexity and local access, limiting its practical exploitation scope. Public exploit code is available, but the issue remains unpatched as of the last vendor update.
Technical ContextAI
The vulnerability exists in NASA cFS's Pickle Module, specifically in the pickle.load() function, which deserializes untrusted Python pickle-formatted data. The root cause is classified as CWE-20 (Improper Input Validation), indicating insufficient sanitization of deserialized objects before use. Pickle deserialization is inherently unsafe when processing untrusted input, as it can instantiate arbitrary Python objects and execute code during the unpickling process. The CVSS v4.0 vector (AV:L/AC:H/AT:N/PR:L) indicates this requires local access, low-privilege authentication, and high complexity to exploit, suggesting the attack path may involve crafted pickle files placed in specific locations or passed through internal APIs that expect serialized data. NASA cFS is a modular software framework used in spacecraft and embedded systems, making this particularly critical in aerospace applications despite the low CVSS score.
RemediationAI
No vendor-released patch identified at time of analysis. NASA was informed early of the vulnerability through issue report (GitHub Issue #951) but has not yet provided a patched release or confirmed remediation timeline. Operators should: (1) Review cFS deployments to identify use of the Pickle Module and assess whether untrusted data could reach pickle.load(); (2) Implement access controls to restrict local system access and limit execution privileges of cFS processes; (3) Consider disabling or isolating the Pickle Module if its functionality is not critical; (4) Monitor NASA cFS repositories (https://github.com/nasa/cFS/) and official advisories for patch availability; (5) If using a cFS-based system in production, contact NASA or your cFS integrator for guidance on risk mitigation or custom patches. Workarounds are limited due to the fundamental nature of pickle deserialization; code-level fixes (input validation, safer serialization formats like JSON) would require upstream NASA remediation or local customization.
More in Core Flight System
View allSame weakness CWE-20 – Improper Input Validation
View allSame technique Deserialization
View allShare
External POC / Exploit Code
Leaving vuln.today