CVE-2026-53984 Efstratios Goudelis CVE debrief

Who should care

Ground Station users and administrators, satellite operators, and organizations relying on Ground Station for orbital source management and observation scheduling should be aware of this vulnerability and take immediate defensive actions to protect their installations.

Technical summary

CVE-2026-53984 is a high-severity vulnerability in Ground Station prior to version 0.6.0. The vulnerability exists in the Socket.IO server's database_backup event handler, allowing unauthenticated network peers to destroy or replace the entire SQLite database by sending a single full_restore command with a malicious SQL blob. This is possible due to disabled authentication enforcement and a wildcard CORS policy. Attackers can connect to the Socket.IO server on port 7000 without credentials, emit the database_backup event, and execute raw SQL commands via exec_driver_sql, potentially destroying satellite records, orbital sources, hardware configurations, and observation schedules, or injecting fabricated data.

Defensive priority

Ground Station users should prioritize immediate defensive actions due to the high CVSS score of 8.8 and the critical nature of the vulnerability allowing unauthenticated database destruction and data injection.

Recommended defensive actions

• Inventory and assess Ground Station installations for version 0.6.0 or later
• Implement authentication enforcement for the Socket.IO server on port 7000
• Restrict CORS policy to only allow trusted domains
• Monitor for unauthorized database modifications and suspicious activity
• Apply the patch from version 0.6.0 or later

Evidence notes

Evidence is based on official CVE and NVD records, as well as source references from GitHub. The CVE description provides details on the unauthenticated database-destruction and arbitrary-data-injection vulnerability in the Socket.IO server's database_backup event handler. However, further details about affected configurations and potential mitigations are limited in the provided source corpus.

Official resources