MOOS‑IvP uFldShoreBroker accepts NODE_BROKER_PING messages without verifying the sender’s authenticity. An attacker can publish a ping message containing a crafted HostRecord, causing the broker to create an outbound bridge route that forwards local variables to an attacker‑controlled address. The flaw enables unauthorized traffic redirection and potential data exfiltration, but it does not provide arbitrary code execution. The weakness corresponds to CWE‑345.

The vulnerable component is the uFldShoreBroker in MOOS‑IvP releases through version 24.8.1. Any system running these or earlier builds that has not applied the fix remains susceptible, while newer releases contain the authentication safeguard.

The CVSS score of 9.3 indicates a high severity issue. Although an EPSS score is not available, the absence of known exploitation does not reduce risk; the flaw is actively exploitable over the network if an attacker can inject a NODE_BROKER_PING. The vulnerability is not listed in the CISA KEV catalog, yet its potential to force traffic through attacker-controlled endpoints warrants prompt remediation. The likely attack vector involves a remote or local attacker with network access to the broker, sending a crafted ping to redirect data flow.