CVE-2026-85439

Received Received - Intake

Remote Code Execution in MOOS-IvP via Malicious Log Path

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: VulnCheck

Description

MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitDir() function that fails to sanitize shell metacharacters in log file pathnames. Attackers can embed shell syntax in log file names or the --dir parameter to execute arbitrary commands with the privileges of the operator running alogsplit.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-03

Last Modified

2026-09-03

Generated

2026-09-04

AI Q&A

2026-09-04

EPSS Evaluated

N/A

NVD

CVE-2026-85439

Affected Vendors & Products

Vendor	Product	Version / Range
moos-ivp	alogsplit	to 24.8.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

MOOS-IvP through 24.8.1 has a remote code execution flaw in the alogsplit tool. The vulnerability occurs in the SplitHandler::handlePreCheckSplitDir() function, which does not properly sanitize shell metacharacters in log file pathnames. Attackers can inject shell commands into log file names or the --dir parameter, allowing arbitrary command execution with the privileges of the user running alogsplit.

Detection Guidance

Check for MOOS-IvP installations and inspect log file paths for unusual characters or shell metacharacters. Review alogsplit command usage for --dir parameter values containing suspicious syntax.

Impact Analysis

This vulnerability allows attackers to execute arbitrary commands on your system if you are running a vulnerable version of MOOS-IvP's alogsplit tool. The impact includes potential data theft, system compromise, or unauthorized access, depending on the privileges of the user running alogsplit.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations using MOOS-IvP may face legal and regulatory penalties if this flaw results in data exposure or system compromise.

Mitigation Strategies

Update MOOS-IvP to the latest version beyond 24.8.1. Avoid using alogsplit with untrusted log file paths or --dir parameters. Implement input validation for log file names and paths.

Hi! I’m here to help you understand CVE-2026-85439. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70