Summary by ScanForGood
Using Gemini 4 Argon through Wiz’s Scan For Good program, we identified and responsibly disclosed a critical authentication bypass affecting NASA’s Mission AI Hub - a publicly accessible LiteLLM-based service supporting NASA engineering and software-development workflows, including spacecraft-related and internal systems.
A URL-normalization difference between the SSO reverse proxy and the application backend allowed a protected route to bypass the intended authentication flow - for example, /sso → /%73so. The backend then trusted unverified identity claims in a client-supplied token, enabling unauthorized administrative access and disclosure of a root administrative secret to the LiteLLM instance.
This created a risk of unauthorized access to service telemetry, plaintext conversations, administrative functionality, and specialized government AI model integrations supporting ITAR-related work. Telemetry indicated that the service supported sensitive NASA engineering workflows.
We validated the vulnerability using read-only operations and reported it through NASA’s Bugcrowd Vulnerability Disclosure Program. NASA marked it resolved on October 2, 2026.
We thank NASA for its prompt response and remediation.