Research · Feb 6, 2026
Critical OS Command Injection Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
A serious OS command injection vulnerability has been identified in BeyondTrust's Remote Support and Privileged Remote Access products, potentially allowing unauthorized access and system compromise.
What changed
A significant vulnerability has been discovered in BeyondTrust's Remote Support (RS) and Privileged Remote Access (PRA) products. This OS command injection flaw enables unauthenticated remote attackers to execute arbitrary operating system commands.
The exploitation of this vulnerability does not require any authentication or user interaction, which heightens the risk of potential system compromise.
Who is affected
The vulnerability impacts users of specific BeyondTrust products, posing a serious risk to various organizations relying on these solutions for remote access and support.
Affected parties include:
- Organizations using BeyondTrust Remote Support (RS)
- Companies utilizing BeyondTrust Privileged Remote Access (PRA)
- IT departments managing remote support solutions
- Any user of systems integrated with these BeyondTrust products
What to do
Organizations are urged to assess their use of BeyondTrust products and implement necessary security measures to mitigate the risks associated with this vulnerability.
Immediate steps should include monitoring for unusual activity and applying any available patches or updates from BeyondTrust.