CVE-2026-85426

MOOS-IvP's uMemWatch application, in all versions through 24.8.1, is vulnerable to OS command injection (CWE-78) because it constructs shell commands from MOOS client names without sanitizing them. An attacker who connects to the MOOS community with a client name containing shell metacharacters can exploit unquoted redirection targets in the resulting system calls to inject additional commands. Successful exploitation grants arbitrary command execution with the privileges of the user running the uMemWatch process, with high impact on the confidentiality, integrity, and availability of that host (CVSS 4.0: 9.3). Affected operators are those running MOOS-IvP-based autonomy stacks, primarily marine robotics research and defense deployments, with uMemWatch active. There is no known public proof-of-concept, the flaw is not in the CISA KEV catalog, and EPSS currently estimates only a 0.6% probability of exploitation in the next 30 days.

What to do: Upgrade uMemWatch/MOOS-IvP to a release newer than 24.8.1 as soon as a patched version is published by the maintainers. Until then, limit which hosts and users can connect to the MOOS database on the vehicle or host running uMemWatch, and audit whether uMemWatch is enabled and which account it runs as. Because exploitation requires a crafted client name, network segmentation of the MOOS port from untrusted clients is an effective interim mitigation.