Design Flaw in OpenC3 COSMOS Affects Configuration File Security
CVE-2026-42085
What is CVE-2026-42085?
OpenC3 COSMOS, a platform enabling command execution on embedded systems, contains a design flaw in its save_tool_config() function that allows an attacker to save configuration files to arbitrary locations within the shared /plugins directory. This vulnerability arises because, despite efforts to mitigate path traversal attacks, the shared directory structure permits the use of crafted filenames to create complex file paths and overwrite existing configuration files. This issue compromises the integrity of the configuration management within the application. The vulnerability has been addressed in the releases 6.10.5 and 7.0.0-rc3, prompting users to update to avoid possible exploitation.
Affected Version(s)
cosmos < 6.10.5 < 6.10.5
cosmos >= 7.0.0.pre.rc1, < 7.0.0-rc3 < 7.0.0.pre.rc1, 7.0.0-rc3