In UrBackup 2.2.6 an attacker can send a malformed request to the client over the network and trigger a fileservplugin/CClientThread.cpp CClientThread::GetFileHashAndMetadata NULL pointer dereference leading to shutting down the client application.