Openbullet vulnerabilities
We track 4 vulnerabilities in Openbullet products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on June 8, 2026.
Latest Openbullet vulnerabilities
- 8.8 High severity
openbullet2: Improper Control of Generation of Code
OpenBullet2 through version 0.3.2 contains an authenticated remote code execution vulnerability that allows authenticated users to execute arbitrary C# code on the server host by creating or modifying job configurations. Attackers can leverage the plain C# exe
- 8.8 High severity
openbullet2: Improper Neutralization of Special Elements used in an OS Command
OpenBullet2 through version 0.3.2 contains a remote code execution vulnerability that allows authenticated users to execute arbitrary commands by uploading script files (.bat.ps1.sh) through the FileProxySource proxy loading feature. Attackers can upload malic
- 8.8 High severity
openbullet2: Improper Limitation of a Pathname to a Restricted Directory
OpenBullet2 through version 0.3.2 contains a path traversal vulnerability in the wordlist endpoint that allows authenticated attackers to perform arbitrary file read, write, and delete operations by supplying unsanitized absolute paths to the upload handler an
- 9.8 Critical severity
openbullet2: Authentication Bypass by Primary Weakness
OpenBullet2 through version 0.3.2 contains an authentication bypass vulnerability in the API key authentication middleware that allows unauthenticated attackers to gain admin access by supplying an empty X-Api-Key header value. Attackers can exploit the middle