medium6.5Public exploit code
CVE-2026-44596
Yamcs has No Rate Limiting on Authentication Endpoint
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- YAMCS yamcs-core 5.12.7 - No Rate Limiting2026-05-30 · webapps · multiple
Impact
Yamcs is a mission control framework. Prior to 5.12.7, the authentication endpoint POST /auth/token in yamcs-core, handled by yamcs-core/src/main/java/org/yamcs/http/auth/AuthHandler.java, lacked any rate limiting, account lockout, or failed-attempt throttling, so an unauthenticated remote attacker could perform unlimited password-guessing attempts against any user account, significantly increasing the risk of successful brute-force attacks. This issue is fixed in versions 5.12.7 and 5.13.0.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.yamcs:yamcs-core | < 5.12.7 | 5.12.7 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Spaceapplications | Yamcs | before 5.12.7 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-w5r6-mcgq-7pq4
- https://github.com/yamcs/yamcs/security/advisories/GHSA-w5r6-mcgq-7pq4
- https://github.com/yamcs/yamcs/commit/309218c651680f79df11a8d0f8628f7033f98a83
- https://github.com/yamcs/yamcs/commit/64392df531fbcbc65f19ee5724c4c23d289f49fc
- https://github.com/yamcs/yamcs/releases/tag/yamcs-5.12.7
- https://github.com/yamcs/yamcs/releases/tag/yamcs-5.13.0