Description
The chat feature within Remote Support (RS) and Privileged Remote Access (PRA) is vulnerable to a Server-Side Template Injection vulnerability which can lead to remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BeyondTrust | Remote support & Privileged Remote Access | 24.2.2 – ≤ 24.2.4, 24.3.1 – ≤ 24.3.3, 25.1.1 | — |
| BeyondTrust | Remote Support(RS) & Privileged Remote Access(PRA) | 24.2.2 – ≤ 24.2.4, 24.3.1 – ≤ 24.3.4, 25.1.1 | — |
Advisories 1
- WID-SEC-2025-1331 BeyondTrust Remote Support: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Jun 16, 2025