CVE-2025-25371: Nasa Core Flight System

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

NASA cFS (Core Flight System) Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any arbitrary file on the system.

Affected products

• Nasa Core Flight System: version 6.7.0 only

Published 2025-03-25. Last modified 2026-06-17.