CVE-2026-85426: MOOS-IvP through 24.8.1 uMemWatch Command Injection via MOOS Client Names

Q: What access does an attacker need to exploit this issue?

An attacker needs to be able to supply or control a MOOS client name processed by uMemWatch. No authentication or user interaction is required according to the provided severity vector.

Q: What is the impact if exploitation succeeds?

Injected shell metacharacters in a MOOS client name can cause arbitrary commands to run with the privileges of the uMemWatch process user. This can affect confidentiality, integrity, and availability.

Q: Which versions are known to be affected?

MOOS-IvP uMemWatch through version 24.8.1 is affected.

Published Sep 3, 2026

Updated

MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client names without sanitization. Attackers can inject shell metacharacters into client names to execute arbitrary commands as the uMemWatch process user through unquoted redirection targets in system calls.

Affected Software

1 affected component

MOOS-IvP uMemWatch<=24.8.1

Event History

Sep 3, 2026

CVE Published

via MITRE·10:38 PM

Data Sourced

via MITRE·10:38 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

An attacker needs to be able to supply or control a MOOS client name processed by uMemWatch. No authentication or user interaction is required according to the provided severity vector.

What is the impact if exploitation succeeds?

Injected shell metacharacters in a MOOS client name can cause arbitrary commands to run with the privileges of the uMemWatch process user. This can affect confidentiality, integrity, and availability.

Which versions are known to be affected?