Vulnerability · Published Sep 3, 2026 · Assigned by VulnCheck
CVE-2026-85426MOOS-IvP through 24.8.1 uMemWatch Command Injection via MOOS Client Names
Critical 9.8
In plain English
A critical-severity OS command injection in moos-ivp from moos-ivp. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 61% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.9%top 39.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client names without sanitization. Attackers can inject shell metacharacters into client names to execute arbitrary commands as the uMemWatch process user through unquoted redirection targets in system calls.
Affected products (as reported)
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- Pull Request #121 issue-tracking, patch
- Proposed fix commit (pull request not merged) patch
- https://github.com/moos-ivp/moos-ivp product
- MemWatch.cpp (verified sink) technical-description
- VulnCheck Advisory: MOOS-IvP through 24.8.1 uMemWatch Command Injection via MOOS Client Names third-party-advisory