What is GHSA-x6m6-xccc-227g?

GHSA-x6m6-xccc-227g is a security advisory published by GitHub Security Advisories with High severity. An OS command injection vulnerability in NASA HyperCP (main branch) allows a network-adjacent...

Which CVE IDs does GHSA-x6m6-xccc-227g cover?

GHSA-x6m6-xccc-227g covers the following CVE IDs: CVE-2026-72579. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-x6m6-xccc-227g?

GHSA-x6m6-xccc-227g has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-x6m6-xccc-227gHighCVSS 7.5

An OS command injection vulnerability in NASA HyperCP (main branch) allows a network-adjacent...

Vendor

GitHub Security Advisories

Published

August 10, 2026

Last Modified

August 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-72579 →

📋 Description

An OS command injection vulnerability in NASA HyperCP (main branch) allows a network-adjacent attacker who can intercept or spoof responses from oceandata.sci.gsfc.nasa.gov to execute arbitrary system commands on the researcher's workstation.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-72579
https://github.com/nasa/HyperCP
https://github.com/nasa/HyperCP/blob/main/Source/OBPGSession.py
https://github.com/advisories/GHSA-x6m6-xccc-227g