CVE-2026-67979

Description

Incorrect access control in the Executive Services dynamic application start path component of NASA cFS v7.0.1 allows attackers to execute arbitrary code via placing a shared object on target storage.

References

• https://github.com/nasa/cFS/issues/1057