CVE-2026-72579 — NASA HyperCP - OS Command Injection via Malicious HTTP Response from Data Server

CVE-2026-72579

NASA HyperCP - OS Command Injection via Malicious HTTP Response from Data Server PUBLISHED

Description (CNA)

An OS command injection vulnerability in NASA HyperCP (main branch) allows a network-adjacent attacker who can intercept or spoof responses from oceandata.sci.gsfc.nasa.gov to execute arbitrary system commands on the researcher's workstation.

Affected (CNA)

Vendor / product	Versions
NASA / HyperCP	affected 0

CWE

CWE-78

References

https://github.com/nasa/HyperCP
https://github.com/nasa/HyperCP/blob/main/Source/OBPGSession.py

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.