Research · Feb 6, 2026 · ZeroDay Catalog
Critical OS Command Injection Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
A severe OS command injection vulnerability has been identified in BeyondTrust's Remote Support and Privileged Remote Access products, posing significant risks to system integrity.
What changed
BeyondTrust has disclosed a critical OS command injection vulnerability affecting its Remote Support (RS) and Privileged Remote Access (PRA) products. This flaw allows unauthenticated remote attackers to execute arbitrary operating system commands.
The vulnerability poses a significant risk as it requires no authentication or user interaction, potentially leading to unauthorized access, data exfiltration, and disruption of services.
Who is affected
Organizations utilizing BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) are at risk. The vulnerability can impact various sectors that rely on these tools for remote management and support.
Specific groups affected include IT departments, managed service providers, and any entities leveraging BeyondTrust solutions for privileged access management.
- BeyondTrust Remote Support (RS)
- BeyondTrust Privileged Remote Access (PRA)
- IT departments managing remote access solutions
- Managed service providers using BeyondTrust products
What to do
Organizations are advised to assess their use of BeyondTrust Remote Support and Privileged Remote Access products immediately. Implementing security measures and monitoring for unusual activities is crucial.
BeyondTrust is expected to release patches or updates to mitigate this vulnerability. Ensure that all systems are updated promptly upon release.
- Review and monitor access logs for suspicious activities.
- Prepare to apply patches or updates from BeyondTrust as they become available.
- Consider implementing additional security controls to limit exposure.