Denial of Service Vulnerability in MOOS Core-MOOS by The MOOS Team
CVE-2026-85441

8.7HIGH

Key Information:

Vendor

Themoos

Status
Core-moos
Vendor
CVE Published:
3 September 2026

What is CVE-2026-85441?

The MOOS core-moos software versions up to 10.4.0 contain a vulnerability that allows unauthenticated attackers to send specially crafted messages with a negative length value to the MOOSDB port. This flaw occurs due to the software's failure to properly validate serialized string lengths, leading to an unhandled exception that can crash the database process. Effectively, this vulnerability can lead to denial of service, disrupting normal operations and availability of the affected service.

Affected Version(s)

core-moos 0 <= 10.4.0

References

https://github.com/themoos/core-moos/pull/74
issue-trackingpatch
https://github.com/themoos/core-moos/commit/04c92981091fd...
patch
https://github.com/themoos/core-moos
product

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Vlatko Kosturjak
.