CVE-2026-25856

Vulnerability

OpenBullet2 through version 0.3.2 contains an authenticated remote code execution vulnerability. This flaw allows authenticated users to execute arbitrary C# code on the server host by creating or modifying job configurations. The vulnerability is present due to the plain C# execution mode lacking reference filtering or API restrictions [1].

Exploitation

An attacker with authenticated access to OpenBullet2 can exploit this vulnerability by creating or modifying job configurations. By leveraging the plain C# execution mode, an attacker can craft malicious C# code to be executed on the server [1].

Impact

Successful exploitation allows an attacker to execute arbitrary C# code on the server host as the process user. This can lead to unauthorized access to the file system, the ability to spawn processes, and the invocation of arbitrary .NET APIs, resulting in a full compromise of the server's capabilities within the context of the running process [1].

Mitigation

OpenBullet2 versions 0.3.2 and later are considered fixed. Users are advised to upgrade to a patched version as soon as possible. No specific release date for the patch was provided in the available references [1].