Improper authorization in nasa-gcn gcn.nasa.gov email notifications
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Privilege escalation, Security bypass
- Confidentiality · integrity · availability
- None · Low · Low
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-266 and CWE-285.
Summary
The nasa-gcn gcn.nasa.gov project is affected up to b299b562af665878964b981a459f0a9c04b11adf. Manipulating the Recipient argument of the /user/email file in the Email Notification Handler results in improper authorization (CWE-285), and a remote attacker with low privileges can trigger it. A public exploit has been released and may be used for attacks.
Written with Claude Haiku 5.5 from the sources below · 2026-11-06
Description from the CNA
A security flaw has been discovered in nasa-gcn gcn.nasa.gov up to b299b562af665878964b981a459f0a9c04b11adf. This issue affects some unknown processing of the file /user/email of the component Email Notification Handler. Performing a manipulation of the argument Recipient results in improper authorization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The pull request to fix this issue awaits acceptance.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| nasa-gcn | gcn.nasa.gov | b299b562af665878964b981a459f0a9c04b11adf | — | No fix listed | CNA |
- gcn.nasa.gov Vendornasa-gcn Affected b299b562af665878964b981a459f0a9c04b11adf Fixed in — No fix listed CNA
CPE names CNA · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:nasa-gcn:gcn.nasa.gov:*:*:*:*:*:*:*:* | — | — | — |
- cpe:2.3:a:nasa-gcn:gcn.nasa.gov:*:*:*:*:*:*:*:* Versions — — ·—
Remediation
The sources list no fixed version for gcn.nasa.gov. A pull request that fixes the issue awaits acceptance.
Written with Claude Haiku 5.5 from the sources below · 2026-11-06
Timeline
- 2026-11-06 Threatist record created from CVE-2026-123664
- 2026-11-06 Alias added: GHSA-r6mw-j6c7-mgp2
References
Sources
- CVE-2026-123664 · CVE Program
- CVE-2026-123664 · NVD
- FIRST EPSS
- GHSA-r6mw-j6c7-mgp2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences