CVE-2026-103244
Received Received - Intake

Authentication Bypass in Ground Station via setup.restore SQL Injection

Publication date: 2026-10-01

Last updated on: 2026-10-01

Assigner: VulnCheck

Description
ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.restore command that allows unauthenticated attackers to execute arbitrary SQL during first-run setup mode. Attackers can invoke setup.restore via Socket.IO to plant admin users and forged session tokens, then authenticate as administrator without credentials for complete application takeover.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-01
Last Modified
2026-10-01
Generated
2026-10-01
AI Q&A
2026-10-01
EPSS Evaluated
N/A
NVD
CVE-2026-103244
EUVD
EUVD-2026-90748

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sgoudelis ground-station to 0.8.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an authentication bypass in ground-station versions before 0.8.0. It allows unauthenticated attackers to execute arbitrary SQL commands during first-run setup mode by invoking the setup.restore command via Socket.IO. Attackers can plant admin users and forged session tokens, then authenticate as administrators without credentials to fully compromise the application.

Detection Guidance

Check ground-station versions before 0.8.0 using commands like 'ground-station --version' or inspect package managers for installed versions. Monitor network traffic for unauthorized Socket.IO connections to setup.restore endpoints during first-run setup mode.

Impact Analysis

This vulnerability allows complete application takeover. Attackers can gain full administrator access without credentials, leading to unauthorized control over the system. This includes access to sensitive data, ability to modify or delete data, and disruption of system operations.

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and access control. It enables unauthorized access to sensitive data, which could result in data breaches. This may lead to non-compliance with GDPR, HIPAA, and other regulations requiring strict access controls and data protection measures.

Mitigation Strategies

Upgrade ground-station to version 0.8.0 or later immediately. Restrict network access to setup.restore endpoints and disable unauthenticated database restore functionality. Review and remove any admin users or session tokens planted by potential attackers.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-103244. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart