Executive brief
NASA's Earthdata Search is a web-based tool for discovering and accessing satellite Earth observation data. A server-side request forgery (SSRF) vulnerability in the OpenSearch Granule endpoint allows unauthenticated remote attackers to manipulate the system into making arbitrary network requests, potentially leading to unauthorized access to internal services or sensitive data exposure.
Technical details
The vulnerability is a server-side request forgery (SSRF) flaw in the OpenSearchGranuleSearchLambda function within serverless/src/openSearchGranuleSearch/handler.js. The vulnerability arises from insufficient validation of the openSearchOsdd parameter, which an attacker can manipulate to force the server to make requests to unintended internal or external systems. The attack is unauthenticated and remotely exploitable via network access to the endpoint. An attacker can leverage this to access internal resources, bypass firewall restrictions, or interact with backend services not intended for external access. A patch or update status is not confirmed in the advisory.
Affected products
- NASA Earthdata Search 1.0.0
Timeline
- 2026-08-31: disclosed
- other: Exploit published publicly