CVE-2026-85446

Name of the Vulnerable Software and Affected Versions MOOS-IvP versions prior to 24.8.2

Description A quadratic processing issue exists in uFldNodeComms where the creation of a new node identity generates a ledger entry and triggers all-pairs distribution work. An attacker can provide an unlimited number of distinct node names within reports to force the shoreside broker into quadratic processing, which results in the delay or prevention of legitimate node report distributions.

Recommendations Update to version 24.8.2 or later.