CVE-2026-85432: MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identity
MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated attackers to attribute writes to other clients by supplying arbitrary source identifiers in serialized messages. Attackers can forge message origins and cancel third-party subscriptions by exploiting the disconnect between authenticated connection identity and wire-supplied source attribution.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attacker needs an authenticated MOOSDB client connection and the ability to send serialized messages with attacker-controlled source identifiers. No user interaction is required.
Which deployments should be considered affected?
MOOS core-moos versions through 10.4.0 should be considered affected where MOOSDB accepts authenticated client connections. The issue arises when message source attribution is taken from the wire-supplied identifier rather than the authenticated connection identity.
What could an attacker do after exploitation?
An attacker can cause writes to appear to originate from other clients and can cancel subscriptions belonging to third parties. This can compromise message-origin integrity and partially affect availability of subscriptions.