CVE-2026-85439 [HIGH] – MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit’s Spli

MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit’s SplitHandler::handlePreCheckSplitDir() function that fails to sanitize shell metacharacters in log file pathnames. Attackers can embed shell syntax in log file names or the –dir parameter to execute arbitrary commands with the privileges of the operator running alogsplit.