CVE-2026-92153

HIGH 7.1

F´: Arbitrary File Write in Svc::FileUplink via attacker-controlled StartPacket.destinationPath

CVSS Score

7.1

EPSS Score

0.0%

EPSS Percentile

0th

F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileUplink handling of Fw::FilePacket::StartPacket destination paths FileUplink copies the packet-controlled destinationPath and opens it for writing without canonicalization or confinement to an upload directory. When a peer able to send file-uplink packets supplies an absolute, traversing, or otherwise attacker-selected writable destination path, files can be created or overwritten at attacker-selected writable filesystem locations, affecting integrity and potentially availability. This issue is fixed in version 4.3.0.

CWE	CWE-22 CWE-73
Vendor	nasa
Product	fprime
Published	Oct 14, 2026

Stay Ahead of the Next One

Get instant alerts for nasa fprime

Be the first to know when new high vulnerabilities affecting nasa fprime are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

Low

Affected Versions

nasa / fprime

< 4.3.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/nasa/fprime/security/advisories/GHSA-5rfj-hw2g-vwmv github.com: https://github.com/nasa/fprime/pull/5320 github.com: https://github.com/nasa/fprime/commit/4c8b9c0b8692b0d47cbd5f2ccec61c74aa02b893 github.com: https://github.com/nasa/fprime/releases/tag/v4.3.0