Authentication Bypass in MOOS Core Software by The MOOS Project

CVE-2026-85424

What is CVE-2026-85424?

MOOS core-moos, up to version 10.4.0, is vulnerable due to lack of authentication in its wire protocol. This vulnerability enables unauthenticated clients to connect and gain full privileges for publishing, subscribing, and executing sensitive operations, such as clearing the database without authorization. Attackers can exploit this flaw by bypassing the compile-time protocol string checks, allowing them to connect using arbitrary client names and execute privileged commands, posing a significant security risk to affected systems.

References