CVE-2026-85451 — MOOS core-moos through 10.4.0 Remote Process Termination via Hard-Coded Multicast Passphrase
MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the SuicidalSleeper component that uses a hard-coded passphrase for multicast command author…
Published: 2026-09-03 · CVSS: 7.1 · CVSS 4.0
MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the SuicidalSleeper component that uses a hard-coded passphrase for multicast command authorization. Any multicast-reachable peer can enumerate MOOS processes and send termination commands to trigger process shutdown by exploiting the default multicast group and port with the known passphrase.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7