CVE-2026-85425

Received Received - Intake

Remote Code Execution in MOOS-IvP iSay

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: VulnCheck

Description

MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAY_MOOS variable handler that passes unsanitized text to a shell command. Attackers can publish SAY_MOOS messages containing backticks or command substitution syntax to execute arbitrary commands as the iSay process user.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-03

Last Modified

2026-09-03

Generated

2026-09-04

AI Q&A

2026-09-04

EPSS Evaluated

N/A

NVD

CVE-2026-85425

Affected Vendors & Products

Vendor	Product	Version / Range
moos-ivp	isay	to 24.8.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

MOOS-IvP iSay through version 24.8.1 has a remote code execution flaw in the SAY_MOOS variable handler. It allows attackers to execute arbitrary commands by publishing messages with backticks or command substitution syntax, which are passed unsanitized to a shell command.

Detection Guidance

To detect this vulnerability, monitor for suspicious SAY_MOOS messages containing backticks or command substitution syntax in MOOS-IvP iSay logs. Check for unexpected shell commands executed by the iSay process user. Inspect network traffic for unauthorized message publishing to the MOOS database.

Impact Analysis

An attacker could gain control of the system running iSay by sending malicious SAY_MOOS messages. This could lead to unauthorized access, data theft, or further compromise of the affected system or network.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR and HIPAA requirements for data protection and access control. Non-compliance may result in legal penalties and reputational damage.

Mitigation Strategies

Immediately update MOOS-IvP iSay to the latest version. Disable or restrict access to the SAY_MOOS variable handler if not required. Implement input validation to sanitize SAY_MOOS messages. Monitor for and block suspicious message patterns containing shell metacharacters.

Hi! I’m here to help you understand CVE-2026-85425. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70