Causal model
What has to happen for this consequence to hold?
2 candidate paths · explicit source, inference, and assumption boundaries.
Perception · Co-dominant path
Perception-to-action
Spoofed GNSS changes the position estimate trusted by the autopilot, causing the aircraft to act on a false navigation state.
Proximity or local access
The attacker must transmit a stronger spoofed GNSS signal within radio range and line of sight; no network account or drone credential is required.
EvidenceNo direct citation — inspect the declared inference or assumption.
Cross-domain authority chain
RF and physical to perception to control and safety domains.
EvidenceNo direct citation — inspect the declared inference or assumption.
Safety-driving perception or intimate data
Spoofed GNSS changes the position estimate trusted by the autopilot, causing the aircraft to act on a false navigation state.
EvidenceNo direct citation — inspect the declared inference or assumption.
Perception-to-action
Spoofed GNSS changes the position estimate trusted by the autopilot, causing the aircraft to act on a false navigation state.
EvidenceNo direct citation — inspect the declared inference or assumption.
Fleet action or replacement
Fleet-wide recovery is required: root cause is unauthenticated L1 C and A.
EvidenceNo direct citation — inspect the declared inference or assumption.
Decision rationale
Why this band?
The compact score is separated into the facts and judgments that produced it.
Reach and effort
- Reachability
RE 2 - Proximity or local access
The attacker must transmit a stronger spoofed GNSS signal within radio range and line of sight; no network account or drone credential is required.
- Execution complexity
EC 2 - Specialist multi-step technique
Adaptive signal shaping requires specialist radio work, but multiple research groups reproduced it with commercial software-defined radio equipment.
- Exposure
EX 2 - Reach and effort support the same exposure
The documented reach and required effort are equally permissive, so neither reduces the other.
Consequence
- Physical / safety
PH 4 - Severe therapy or actuation consequence
Forced fly-away, steering to attacker location, crash and forced landing are credible dangerous actuation.
- Data / perception
DP 4 - Safety-driving perception or intimate data
Spoofed GNSS changes the position estimate trusted by the autopilot, causing the aircraft to act on a false navigation state.
- Authority
AT 2 - Bounded function authority
No signing and firmware root or fleet control plane is captured.
Scale and recovery
- Chainability
CH 4 - Cross-domain authority chain
RF and physical to perception to control and safety domains.
- Reuse scale
SR 4 - Shared fleet-wide primitive
Technique reuses against any unauthenticated civilian GNSS receiver (no per-device secret).
- Execution scale
SX 3 - Deployment-wide with setup
One spoofer affects all in-range receivers, deployment and area-wide but requires RF setup and proximity, not remote cloud fleet.
- Recovery burden
OR 4 - Fleet action or replacement
Fleet-wide recovery is required: root cause is unauthenticated L1 C and A.
Confidence and status
- Evidence strength
EV 3 - Reproduced or strongly report-backed
source citation pending public URL supports a reproduced or strongly report-backed condition; this registry still keeps consequence review separate from exploit confirmation.
- Liveness
LS Active - Active condition at scoring time
The public record did not establish a complete mitigation at scoring time; field exploitation is stated only where a cited source supports it.
Decision trail
How the final band follows
- Base bandCRITICAL
- No adjustment
The CRITICAL base band remains final because no separate cap or systemic uplift applies. Spoofed GNSS changes the position estimate trusted by the autopilot, causing the aircraft to act on a false navigation state.
- Final candidate bandCRITICAL
Technical vector
CPATH:1.0-candidate/TT:PERCEPTION_TO_ACTION/RE:2/EC:2/EX:2/PH:4/DP:4/AT:2/CH:4/SR:4/SX:3/OR:4/EV:3/LS:ACTIVERead the scoring method →Safety · Co-dominant path
Device-control safety
Autopilot actions driven by the false position can divert or crash the aircraft, creating a credible dangerous-actuation consequence.
Proximity or local access
The spoofer must transmit within radio range and line of sight of the target drone.
EvidenceNo direct citation — inspect the declared inference or assumption.
Reusable multi-stage bridge
The forged GNSS signal crosses from the radio environment into navigation state and then into flight control.
EvidenceNo direct citation — inspect the declared inference or assumption.
Severe therapy or actuation consequence
Autopilot actions driven by the false position can divert or crash the aircraft, creating a credible dangerous-actuation consequence.
EvidenceNo direct citation — inspect the declared inference or assumption.
Device-control safety
Autopilot actions driven by the false position can divert or crash the aircraft, creating a credible dangerous-actuation consequence.
EvidenceNo direct citation — inspect the declared inference or assumption.
Fleet action or replacement
Recovery requires restoring trusted navigation inputs and confirming the vehicle’s location and route before resuming operation.
EvidenceNo direct citation — inspect the declared inference or assumption.
Decision rationale
Why this band?
The compact score is separated into the facts and judgments that produced it.
Reach and effort
- Reachability
RE 2 - Proximity or local access
The spoofer must transmit within radio range and line of sight of the target drone.
- Execution complexity
EC 2 - Specialist multi-step technique
Reproducible adaptive spoof with SDR.
- Exposure
EX 2 - Reach and effort support the same exposure
The documented reach and required effort are equally permissive, so neither reduces the other.
Consequence
- Physical / safety
PH 4 - Severe therapy or actuation consequence
Autopilot actions driven by the false position can divert or crash the aircraft, creating a credible dangerous-actuation consequence.
- Data / perception
DP 3 - Sensitive device or personal data
Manipulated sensitive operational and navigation state feeding control (not exfiltration).
- Authority
AT 2 - Bounded function authority
The attacker influences control through a trusted sensor input without obtaining credentials, operating-system authority, or a firmware trust root.
Scale and recovery
- Chainability
CH 3 - Reusable multi-stage bridge
The forged GNSS signal crosses from the radio environment into navigation state and then into flight control.
- Reuse scale
SR 4 - Shared fleet-wide primitive
The same adaptive spoofing method can be reused against civilian receivers that lack authenticated GNSS signals.
- Execution scale
SX 3 - Deployment-wide with setup
Area-wide with RF setup.
- Recovery burden
OR 4 - Fleet action or replacement
Recovery requires restoring trusted navigation inputs and confirming the vehicle’s location and route before resuming operation.
Confidence and status
- Evidence strength
EV 3 - Reproduced or strongly report-backed
source citation pending public URL supports a reproduced or strongly report-backed condition; this registry still keeps consequence review separate from exploit confirmation.
- Liveness
LS Active - Active condition at scoring time
The public record did not establish a complete mitigation at scoring time; field exploitation is stated only where a cited source supports it.
Decision trail
How the final band follows
- Base bandCRITICAL
- No adjustment
The CRITICAL base band remains final because no separate cap or systemic uplift applies. Autopilot actions driven by the false position can divert or crash the aircraft, creating a credible dangerous-actuation consequence.
- Final candidate bandCRITICAL
Technical vector
CPATH:1.0-candidate/TT:DEVICE_CONTROL_SAFETY/RE:2/EC:2/EX:2/PH:4/DP:3/AT:2/CH:3/SR:4/SX:3/OR:4/EV:3/LS:ACTIVERead the scoring method →Triage implication
Verify the perception transition before acting on the band.
Validate the deployment-specific transition from digital control or perception to physical action before setting remediation urgency.
Evidence ledger
Public sources used by this record.
At least one citation still lacks a public URL; that gap keeps this record provisional.
- othersource citation pending public URL
source citation pending public URL · public URL pending
Published baseline
Keep exploit severity and consequence reasoning distinct.
No public baseline score is available for this case.
Original scorer notes
The source narrative behind the structured explanation.
Retained for provenance and historical review, not as the recommended way to understand the assessment.
Read the original scorer notes
Assessment
CFSE Consequence Paths assesses GPS/GNSS Spoofing Safe-Hijacking of Consumer Drones (Adaptive GPS Spoofing / Tractor Beam class) at CRITICAL — the worst of 2 risk paths (perception, safety). The dominant consequence is manipulated perception that drives action.
Vulnerability
GPS/GNSS Spoofing Safe-Hijacking of Consumer Drones (Adaptive GPS Spoofing / Tractor Beam class). Reported attack vector: RF / wireless (GNSS signal injection within radio range; no network or credentials).
CFSE Consequence Paths analysis
The vulnerability is decomposed into one risk path per terminal consequence. Each path is scored on its exposure (reachability × execution complexity) and the authority, perception, and physical/safety it reaches, together with its scale of reuse, scale of execution, and recoverability.
PERCEPTION_TO_ACTION → CRITICAL
CPATH:1.0-candidate/TT:PERCEPTION_TO_ACTION/RE:2/EC:2/EX:2/PH:4/DP:4/AT:2/CH:4/SR:4/SX:3/OR:4/EV:3/LS:ACTIVE
Exposure EX=2 (reachability and complexity-bound) · bands PH=CRITICAL · DP=CRITICAL · AT=ELEVATED → base CRITICAL · uplift recall-class recovery → assessed CRITICAL.
- Primary path: spoofed GNSS corrupts the position estimate (DP:4 nav/world-model state) that the autopilot trusts and acts on, driving physical actuation.
- perception_feeds_action — true because the deceived location estimate directly drives flight control, fail-safe transitions, and trajectory. PH:4: forced fly-away, steering to attacker location, crash/forced landing are credible dangerous actuation. RE:2: RF/proximity within line-of-sight, no network/creds. EC:2: advanced-but-reproducible adaptive signal shaping with COTS SDR, multiple groups replicated. AT:2: no signing/firmware root or fleet control plane is captured; attacker controls a trusted sensor input (bounded component-level deception), not a credential or trust root, so not AT:3/4. CH:4 and boundary_crossing: RF/physical -> perception -> control/safety domains. SR:4: technique reuses against any unauthenticated civilian GNSS receiver (no per-device secret). SX:3: one spoofer affects all in-range receivers, deployment/area-wide but requires RF setup/proximity, not remote cloud fleet. OR:4 and recovery_needs_fleet_action: root cause is unauthenticated L1 C/A; no software patch, recovery is operational/sensor-fusion/authenticated-GNSS fleet-level redesign. EV:3 reproduced.
DEVICE_CONTROL_SAFETY → CRITICAL
CPATH:1.0-candidate/TT:DEVICE_CONTROL_SAFETY/RE:2/EC:2/EX:2/PH:4/DP:3/AT:2/CH:3/SR:4/SX:3/OR:4/EV:3/LS:ACTIVE
Exposure EX=2 (reachability and complexity-bound) · bands PH=CRITICAL · DP=HIGH · AT=ELEVATED → base CRITICAL · uplift recall-class recovery → assessed CRITICAL.
- Terminal safety/control consequence: attacker commandeers vehicle trajectory or forces fail-safe (RTH/land/fly-away), yielding effective control over a safety-critical actuator without any software credential. PH:4: dangerous actuation/crash credible. RE:2 RF proximity. EC:2 reproducible adaptive spoof with SDR. AT:2: control influence via trusted sensor input, no credential/firmware/trust-root captured. DP:3: manipulated sensitive operational/navigation state feeding control (not exfiltration).
- perception_feeds_action — true. CH:3 cross-domain influence;
- boundary_crossing — true. SR:4 portable technique. SX:3 area-wide with RF setup. OR:4 no root-cause patch, operational/fleet mitigation. EV:3 reproduced takeover demonstrated. Distinct from perception path in that the terminal effect is the unsafe device control/safety outcome itself.
Published baseline
No public baseline score has been published for this finding. It belongs to a perception/control harm class that is often outside published vulnerability-scoring coverage. The registry records the reachable consequence path for review.
Sources
- source citation pending public URL
CFSE Consequence Paths Registry 1.0-candidate, CPATH-2026-0022 (“GPS/GNSS Spoofing Safe-Hijacking of Consumer Drones (Adaptive GPS Spoofing / Tractor Beam class)”), paths.cfse.ai/CPATH-2026-0022 (published 2026-06-03).