Boyolali Elementary Student Finds Security Flaw on NASA Website

A 12-year-old Indonesian student has gained international recognition after discovering a security vulnerability on the website of the U.S. space agency, NASA. Ibrahim Al Abrar, a sixth-grader from Boyolali, Central Java, was awarded a letter of appreciation from NASA for his diligence in identifying and reporting the flaw.

The letter, dated July 9, 2026, acknowledges Ibrahim's contribution to enhancing NASA's system security. He reported the vulnerability through NASA's Vulnerability Disclosure Policy (VDP) after his findings were verified. This achievement highlights the growing talent in cybersecurity emerging from Indonesia.

Ibrahim, who aspires to be a cybersecurity expert, developed his interest through online resources, including YouTube tutorials and AI-driven learning applications. He was motivated by news of others successfully identifying security gaps in major systems. His father, Aminudin, who teaches Computer and Network Engineering, expressed pride in his son's accomplishment, noting that Ibrahim initially learned coding before shifting his focus to cybersecurity in early 2026. Ibrahim's discovery involved a 'broken link hijacking' vulnerability, which he reported after a nearly two-month waiting period for a response.