MOOS-IvP through 24.8.1 fails to properly validate variable names extracted from alog files in the SplitHandler, allowing attackers to write files outside the split directory. Attackers can supply crafted alog files with backslash sequences in variable names to escape the output directory and append to arbitrary files on Windows systems.
References
| Link | Resource |
|---|---|
| https://github.com/moos-ivp/moos-ivp | Product |
| https://github.com/moos-ivp/moos-ivp/blob/1de9ae146cd63c209e8c3fd81611a4ed2472971b/ivp/src/lib_logutils/SplitHandler.cpp#L189 | Issue Tracking Patch |
| https://github.com/moos-ivp/moos-ivp/commit/6f0619e905b325d6b88f76425673045c6e4f6f94 | Issue Tracking Patch |
| https://github.com/moos-ivp/moos-ivp/pull/137 | Issue Tracking Patch |
| https://www.vulncheck.com/advisories/moos-ivp-through-24.8.1-alog-splitting-path-traversal-on-windows | Third Party Advisory |
Configurations
History
14 Oct 2026, 23:33
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/moos-ivp/moos-ivp - Product | |
| References | () https://github.com/moos-ivp/moos-ivp/blob/1de9ae146cd63c209e8c3fd81611a4ed2472971b/ivp/src/lib_logutils/SplitHandler.cpp#L189 - Issue Tracking, Patch | |
| References | () https://github.com/moos-ivp/moos-ivp/commit/6f0619e905b325d6b88f76425673045c6e4f6f94 - Issue Tracking, Patch | |
| References | () https://github.com/moos-ivp/moos-ivp/pull/137 - Issue Tracking, Patch | |
| References | () https://www.vulncheck.com/advisories/moos-ivp-through-24.8.1-alog-splitting-path-traversal-on-windows - Third Party Advisory | |
| First Time |
Mit
Mit moos-ivp |
|
| CPE | cpe:2.3:a:mit:moos-ivp:*:*:*:*:*:*:*:* |
Information
Published : 2026-09-03 23:17
Updated : 2026-10-14 23:33
NVD link : CVE-2026-85456
Mitre link : CVE-2026-85456
CVE.ORG link : CVE-2026-85456
JSON object : View
Products Affected
mit
- moos-ivp
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')