AMMOS Instrument Toolkit (AIT) Deep Space Network (DSN) Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension (SLE)…

CVE-2026-60113 is a missing authentication vulnerability in the AMMOS Instrument Toolkit (AIT) Deep Space Network (DSN) Interface prior to version 2.2.2. The flaw exists in the Space Link Extension (SLE) interface manager, which exposes seven unprotected API routes accessible via direct HTTP requests without any credentials. Unauthenticated network attackers can exploit these endpoints to start or stop Deep Space Network communication sessions, retrieve telemetry frame data, and inject arbitrary frames into active spacecraft links. The vulnerability poses a critical risk to spacecraft operations and deep space mission integrity. A fix was released in version 2.2.2 on 2026-07-13. References include the official GitHub changelog, a specific commit, a release tag, a GitHub Security Advisory (GHSA-gj83-67wr-82mv), and a VulnCheck advisory. The severity is rated High given the potential for direct interference with active spacecraft communications.