CVE-2026-25856

Name of the Vulnerable Software and Affected Versions OpenBullet2 versions prior to 0.3.3

Description Authenticated users can execute arbitrary C# code on the server host by creating or modifying job configurations. This is possible because the plain C# execution mode does not implement reference filtering or API restrictions, allowing an attacker to access the file system, spawn processes, and invoke arbitrary .NET APIs with the privileges of the process user.

Recommendations Update to a version newer than 0.3.2.