CVE-2026-85439: MOOS-IvP through 24.8.1 alogsplit Command Injection via Input Pathname
MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitDir() function that fails to sanitize shell metacharacters in log file pathnames. Attackers can embed shell syntax in log file names or the --dir parameter to execute arbitrary commands with the privileges of the operator running alogsplit.
Affected Software
Event History
Frequently Asked Questions
What access or interaction is required to exploit this issue?
An attacker must be able to cause alogsplit to process a log-file pathname containing shell syntax, or influence the value supplied through its --dir parameter. Exploitation occurs when an operator runs alogsplit on that input.
Which accounts and systems are at risk?
Systems are at risk where an operator runs alogsplit against attacker-controlled or untrusted log filenames or attacker-influenced output-directory values. Commands execute with the privileges of the operator who runs alogsplit.
What can be done while a fix is being deployed?
Do not run alogsplit on untrusted log files or with untrusted --dir values. Restrict log filenames and directory arguments to trusted paths that do not contain shell metacharacters, and run the tool with the least privileges practical.
How can I determine whether an installation is affected?
MOOS-IvP versions through 24.8.1 are affected. Review alogsplit usage for processing of externally supplied log paths or --dir arguments, especially where filenames may contain shell metacharacters.