by Kastro
Paper/Archive/CVE-2026-103244

CVE-2026-103244

sgoudelis ground-station — ground-station before 0.8.0 Authentication Bypass via setup.restore

EPSS 0.6%public exploitCVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 46.9.469 × 209.4Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.restore command that allows unauthenticated attackers to execute arbitrary SQL during first-run setup mode. Attackers can invoke setup.restore via Socket.IO to plant admin users and forged session tokens, then authenticate as administrator without credentials for complete application takeover.

Affected

ProductAffectedFixed inSource
ground-station< 0.8.00.8.0CNA

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitgithub.com/sgoudelis/ground-station/security/advisories/GHSA-3mqj-q84c-crjqpatchgithub.com/sgoudelis/ground-station/commit/940df2128e57fa779d0ddee2d9726bd829fc61e1writeupvulncheck.com/advisories/ground-station-before-0.8.0-authentication-bypass-via-setup-restore