CVE-2026-71289
CriticalCVSS 9.8Summary
The NASA-AMMOS Asynchronous Network Management System (ANMS) reference implementation's default docker-compose.yml publishes the amp-manager service's REST API directly to the host network interface (port 8089) with cap_add: NET_ADMIN, NET_RAW, SYS_NICE, bypassing the CAM gateway that is otherwise the system's sole authentication boundary. The underlying REST server, implemented with CivetWeb, is configured with enable_auth_domain_check set to "no" and registers every route, including the DTNMA agent command-dispatch endpoints, with a null authentication callback. Any network-reachable client can therefore enumerate registered agents, submit arbitrary command sets to them, and clear stored reports, entirely without credentials.
Risk Assessment
Risk of unauthorized access to the DTN network management system, potentially allowing an attacker to manipulate agents (possibly simulated or real spacecraft/ground nodes) and compromise operational integrity.
Recommendation
Avoid publishing the REST API directly to the host and configure authentication for all routes. Also consider using the CAM gateway as the sole access point and restrict container capabilities.
Original NVD description (English source)
The NASA-AMMOS Asynchronous Network Management System (ANMS) reference implementation's default docker-compose.yml publishes the amp-manager service's REST API directly to the host network interface (port 8089, e.g. "${ION_MGR_PORT:-8089}:8089/tcp") with cap_add: NET_ADMIN, NET_RAW, SYS_NICE, bypassing the CAM (Configuration and Access Manager) gateway that is otherwise the system's sole authentication boundary. The underlying REST server, implemented with CivetWeb in JHUAPL/dtnma-tools (src/refdm/nm_rest.c), is configured with enable_auth_domain_check set to "no" and registers every route, including the DTNMA agent command-dispatch endpoints (.../agents/{eid|idx}/send, which accept and forward EXECSET-encoded command sets to a registered DTNMA agent), with a null authentication callback. Any network-reachable client can therefore enumerate registered agents, submit arbitrary command sets to them, and clear stored reports, entirely without credentials. This affects NASA-AMMOS/anms and JHUAPL-DTNMA/dtnma-tools as published; both repositories present this as a reference/ground DTN network-management implementation and testbed, and the affected components communicate with DTNMA agents (which may represent simulated or real spacecraft/ground nodes depending on deployment) rather than being flight software running onboard a spacecraft.