CVE-2026-67979

Summary

The flaw allows attackers to execute arbitrary code by placing a shared object on target storage due to incorrect access control in NASA cFS v7.0.1's dynamic application start path component.

Exploitability

Exploitation requires placing a malicious shared object on the target storage, which could be feasible if proper file system protections are not in place.

Blast radius

If exploited, this vulnerability could lead to full compromise of the affected system, potentially allowing unauthorized execution of code with high impact.

Prioritized remediation

Update to the latest version of NASA cFS that addresses this issue or apply vendor-provided patches immediately.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.