Exposure of Sensitive Earthdata User and Internal Employee Credentials via Publicly Indexed Infostealer Logs

Disclosed by

Piyush69

Engagement National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
Disclosed date 4 Nov 2026 8 days ago
Priority P1 Bugcrowd's VRT priority rating
Status Resolved This vulnerability has been accepted and fixed

Hi NASA Team,

We are requesting disclosure of this resolved P1 report for transparency and our security research portfolios.

Thank you once again for remediation and continued support in securing NASA’s digital assets!

Best regards,

Piyush Dhariwal & Team