CVE-2025-59534

CVE-2025-59534 is a critical command injection vulnerability in NASA CryptoLib, affecting versions prior to 1.4.2. This flaw allows an unauthenticated attacker to execute arbitrary commands on a spacecraft's core Flight System (cFS) by injecting malicious input into the initialize_kerberos_keytab_file_login() function, which directly interpolates user-controlled data into a shell command. With a CVSS score of 7.8 (HIGH), successful exploitation could lead to complete compromise of confidentiality, integrity, and availability of the affected system. While the vulnerability is severe, there is currently no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.