Cycode found unauthenticated command injection paths in the AIT-GUI console NASA uses to operate instruments and spacecraft.