CVE-2026-79954
NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID
- State
- Published
- Severity
- 8.7 High
- Published
- Sep 18, 2026
- Updated
- Sep 18, 2026
- Reserved
- Aug 25, 2026
Description
NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand (TC) receive path. The receiver selects the Security Association used for SDLS processing solely from the SPI field inside the incoming frame, but it does not verify that the selected SA is authorized for the frame's GVCID.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N | Fluid Attacks |
Weaknesses
- CWE-306 Missing Authentication for Critical Function
Affected Products
| Product | Versions |
|---|---|
CryptoLibNASA |
|
References
- https://fluidattacks.com/advisories/linkinthird-party-advisory
- https://github.com/nasa/CryptoLibproduct
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.