CVE-2026-85451

MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the SuicidalSleeper component that uses a hard-coded passphrase for multicast command authorization. Any multicast-reachable peer can enumerate MOOS processes and send termination commands to trigger process shutdown by exploiting the default multicast group and port with the known passphrase.

Score

CVSS 4.0 7.1 High

Status

Analyzed - disclosure@vulncheck.com

Published

2026-09-03

Last modified

2026-10-14

Weaknesses

CWE-798

Affected products

• Core-moos (Themoos)

References

• https://github.com/themoos/core-moos/pull/85
• https://github.com/themoos/core-moos/commit/488806a07db9f21eea124f48a9c0392f058f01dc
• https://github.com/themoos/core-moos
• https://github.com/themoos/core-moos/blob/ec9c77c68fcbdef8f5e4c60fe243acd223433f0c/Core/libMOOS/Comms/SuicidalSleeper.c…
• https://www.vulncheck.com/advisories/moos-core-moos-through-10.4.0-remote-process-termination-via-hard-coded-multicast-…