A vulnerability in the CF_CFDP_RecvMd() component of NASA cFS version 7.0.1 allows attackers to control where received content and data are stored, potentially leading to information disclosure. This issue is tracked as CVE-2026-67972 and has a high severity rating with a CVSS score of 7.5. The vulnerability does not require privileges or user interaction and can be exploited remotely. No patch or remediation details are currently provided.