OPA for Windows Vulnerability Exposes NTLM Hashes

Tenable disclosed CVE-2024-8260 in Open Policy Agent (OPA) for Windows: improper validation permits an attacker to supply an SMB share instead of a Rego file, causing the system to authenticate to an attacker-controlled server and leak Net-NTLMv2 hashes. The leaked credentials could be relayed or cracked for lateral movement and access to other systems; organizations using OPA on Windows should update to v0.68.0 or later to mitigate the issue.