CVE-2026-39908

Name of the Vulnerable Software and Affected Versions OpenBullet2 versions prior to 0.3.3

Description On Windows, the application allows remote attackers to capture the NTLMv2 hash of the process user. This occurs when a job proxy source is configured with a UNC (Universal Naming Convention) path pointing to a server controlled by the attacker. When the job starts, the application attempts to load proxies from this path, triggering an SMB (Server Message Block) authentication attempt that discloses the NTLMv2 hash, which can then be relayed or cracked offline.

Recommendations Update to a version newer than 0.3.2.