NASA AIT-GUI flaws could let unauthenticated attackers issue spacecraft commands; version 2.5.2 limits exposure but still lacks authentication.