Anduril and Palantir battlefield communication system has deep flaws, Army memo says

An internal U.S. Army memo has designated the Next Generation Combat Vehicle (NGC2) battlefield communications network prototype, developed by Anduril and Palantir, as "very high risk" due to "fundamental security" vulnerabilities. The assessment cites critical flaws including a lack of access control, inability to monitor user actions, and numerous unassessed third-party applications containing high-severity code vulnerabilities. This finding, despite a recent $100 million prototype contract for Anduril, raises significant concerns about the Pentagon's strategy of leveraging Silicon Valley firms for rapid defense technology and could impact future contracting for these companies.

Analysis

An internal U.S. Army memo has designated the NGC2 battlefield communications network prototype, a project involving Palantir (PLTR) and Anduril, as "very high risk" due to fundamental security deficiencies. The critique, originating from the Army's chief technology officer, highlights a critical lack of access controls, stating the system cannot control data visibility or monitor user actions. This vulnerability allows any authorized user to potentially access all classified information, with the memo noting the absence of logging to track such activity. The report further identifies significant risks from unvetted third-party applications, citing one with 25 high-severity code vulnerabilities and three others with over 200 vulnerabilities each. This scathing assessment, which warns of the "likelihood of an adversary gaining persistent undetectable access," directly contrasts with the recent award of a $100 million prototype contract to Anduril and its partners. While the Army's Chief Information Officer framed the report as part of a normal process for "triaging cybersecurity vulnerabilities," the severity of the findings casts significant doubt on the viability and security of the initial product and challenges the Pentagon's strategy of relying on Silicon Valley firms for rapid technology deployment.

Key Decisions for Investors

• Investors in Palantir (PLTR) should recognize the significant headline risk from the "very high risk" designation, as it directly challenges the company's core value proposition as a secure government partner and could jeopardize the future of the $100 million NGC2 contract.
• The severe security flaws identified in the memo may lead to project delays, increased remediation costs, or a potential re-evaluation of the contract, creating uncertainty around a key revenue opportunity for Palantir in the defense sector.
• Monitor for official responses from Palantir and the Department of Defense, as the Army's decision to either mitigate these issues internally or publicly revise the project's scope will be a critical indicator of the long-term impact on the company.