Rapidraw
Monthly
Sensitive information disclosure in RapidRAW before 1.6.0 (an open-source cross-platform RAW photo editor) allows a remote attacker to steal a Windows victim's NTLMv2 credentials by embedding a UNC path in the lutPath field of a preset file. Because RapidRAW passes lutPath directly to File::open() without validation, opening the poisoned preset forces an outbound SMB authentication to an attacker-controlled host. There is no public exploit identified at time of analysis, but the technique (UNC-path credential coercion) is well understood and trivially reproducible, so real-world abuse is realistic once a malicious preset is shared.
Sensitive information disclosure in RapidRAW before 1.6.0 (an open-source cross-platform RAW photo editor) allows a remote attacker to steal a Windows victim's NTLMv2 credentials by embedding a UNC path in the lutPath field of a preset file. Because RapidRAW passes lutPath directly to File::open() without validation, opening the poisoned preset forces an outbound SMB authentication to an attacker-controlled host. There is no public exploit identified at time of analysis, but the technique (UNC-path credential coercion) is well understood and trivially reproducible, so real-world abuse is realistic once a malicious preset is shared.