CVE-2026-85427: Download of Code Without Integrity Check in themoos essential-moos

CVE-2026-85427 describes a remote code execution vulnerability in the MOOS essential-moos pAntler component up to version 10.0.1. The vulnerability arises because pAntler parses and executes Run entries from mission files published to the MOOSDB without verifying the authenticity of the source. Attackers can exploit this by publishing a malicious MISSION_FILE message containing crafted Run entries, which pAntler executes via execvp(), leading to arbitrary code execution without authentication.

This vulnerability allows unauthenticated remote attackers to execute arbitrary code on systems running vulnerable versions of pAntler. The exploit requires publishing a crafted mission file to the MOOSDB, enabling full control over the affected system processes. The CVSS 4.0 score of 9.2 indicates critical severity with network attack vector and no privileges or user interaction required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented at this time. Until a patch is available, restrict access to the MOOSDB to trusted users and networks to prevent unauthorized mission file publishing.