NASA AIT-Core version 2.5.2 and earlier contain multiple SQL injection vulnerabilities in the query_packets and insert functions. These vulnerabilities allow unauthenticated attackers to execute arbitrary SQL commands, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. The vulnerability has a critical severity with a CVSS score of 9.8.