Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2025-5309

Remote Support & Privileged Remote Access server side template injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
BT

Description

The chat feature within Remote Support (RS) and Privileged Remote Access (PRA) is vulnerable to a Server-Side Template Injection vulnerability which can lead to remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

BeyondTrust Remote support & Privileged Remote Access

Default version status: unaffected

  • 24.2.2 to ≤ 24.2.4affected
  • 24.3.1 to ≤ 24.3.3affected
  • 25.1.1affected

BeyondTrust Remote Support(RS) & Privileged Remote Access(PRA)

Default version status: unaffected

  • 24.2.2 to ≤ 24.2.4affected
  • 24.3.1 to ≤ 24.3.4affected
  • 25.1.1affected

References