NASA AIT-Core version 2.5.2 and earlier contains a critical remote code execution vulnerability in its use of the Pickle Python library. This flaw allows attackers to execute arbitrary commands without authentication, posing a severe risk to confidentiality, integrity, and availability.