PyPI/ait-core CVE-2026-47731: critical 9.1, EPSS 0.89%
NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)
Action: Upgrade ait-core to 2.6.1 or later.
pip install ait-core==2.6.1pip install ait-core==3.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.1 | - |
| 3.1.0 | 3.1.1 | - |
Fixed versions
| 2.6.1 | 3.1.1 |
Sources
- osv: PYSEC-2026-265
- https://github.com/NASA-AMMOS/AIT-Core/security/advisories/GHSA-p462-prxw-mjx4
- https://github.com/NASA-AMMOS/AIT-Core
- https://github.com/NASA-AMMOS/AIT-Core/releases/tag/2.6.1
- https://github.com/NASA-AMMOS/AIT-Core/releases/tag/3.1.1
- https://pypi.org/project/ait-core
- https://github.com/advisories/GHSA-p462-prxw-mjx4
- https://nvd.nist.gov/vuln/detail/CVE-2026-47731
CVE-2026-47731 · published · modified · JSON