CVE-2026-79954: NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID
NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand (TC) receive path. The receiver selects the Security Association used for SDLS processing solely from the SPI field inside the incoming frame, but it does not verify that the selected SA is authorized for the frame's GVCID.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attacker needs to be able to send or influence incoming Telecommand frames processed by the TC receive path. Exploitation relies on supplying a frame whose SPI selects a Security Association that is not authorized for that frame's GVCID.
Which deployments should be prioritized for review?
Prioritize deployments using NASA CryptoLib 1.5.0 that receive and process SDLS Telecommand traffic. The affected behavior is in selection of the Security Association during TC receive processing.