CVE-2026-85456

Received Received - Intake

MOOS-IvP SplitHandler Path Traversal Vulnerability

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: VulnCheck

Description

MOOS-IvP through 24.8.1 fails to properly validate variable names extracted from alog files in the SplitHandler, allowing attackers to write files outside the split directory. Attackers can supply crafted alog files with backslash sequences in variable names to escape the output directory and append to arbitrary files on Windows systems.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-03

Last Modified

2026-09-03

Generated

2026-09-04

AI Q&A

2026-09-04

EPSS Evaluated

N/A

NVD

CVE-2026-85456

Affected Vendors & Products

Vendor	Product	Version / Range
moos-ivp	moos-ivp	to 24.8.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

MOOS-IvP through version 24.8.1 has a flaw in the SplitHandler where variable names from alog files are not properly validated. Attackers can exploit this by creating malicious alog files with backslash sequences in variable names to escape the intended output directory. On Windows systems, this allows writing or appending to arbitrary files outside the split directory.

Detection Guidance

Check MOOS-IvP logs and alog files for variable names containing backslash sequences or unusual file paths. Inspect file system for unexpected files outside intended directories, especially on Windows systems.

Impact Analysis

This vulnerability could allow attackers to overwrite or append malicious content to critical system files on Windows systems running MOOS-IvP. This might lead to system instability, unauthorized data access, or execution of arbitrary code if the attacker manipulates executable files or configuration settings.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA as it involves file system manipulation on Windows systems through crafted alog files. However, unauthorized file access or modification could potentially lead to data breaches or integrity issues, which may indirectly impact compliance if sensitive data is exposed or altered.

Mitigation Strategies

Update MOOS-IvP to the latest version (24.8.1 or later). Restrict file system permissions to prevent unauthorized file writes. Monitor and validate alog file inputs for malicious variable names.

Hi! I’m here to help you understand CVE-2026-85456. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70