CVE-2025-5309

The chat feature within Remote Support (RS) and Privileged Remote Access (PRA) is vulnerable to a Server-Side Template Injection vulnerability which can lead to remote code execution.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - 13061848-ea10-403d-bd75-c83a022c2891

Published

2025-06-16

Last modified

2026-02-26

Weaknesses

CWE-94

Affected products

• Privileged Remote Access (Beyondtrust)
• Remote Support (Beyondtrust)
• Remote Support Privileged Remote Access (Beyondtrust)
• Remote Supportrs Privileged Remote Accesspra (Beyondtrust)

References

• https://www.beyondtrust.com/trust-center/security-advisories/bt25-04