🚨 CVE-2026-85429
MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source. Attackers can craft NODE_MESSAGE packets with spoofed source identities to impersonate other nodes and post arbitrary variable notifications without validation.
🎖@cveNotify
GitHub
GitHub - moos-ivp/moos-ivp: MOOS-IvP is a set of modules for providing autonomy on robotic platforms, in particular autonomous…
MOOS-IvP is a set of modules for providing autonomy on robotic platforms, in particular autonomous marine vehicles. - moos-ivp/moos-ivp
September 5, 2026 29
