critical9.8
CVE-2025-5309
The chat feature within Remote Support (RS) and Privileged Remote Access (PRA) is vulnerable to a Server-Side Template Injection vulnerability which can lead t…
Impact
The chat feature within Remote Support (RS) and Privileged Remote Access (PRA) is vulnerable to a Server-Side Template Injection vulnerability which can lead to remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Beyondtrust | Privileged Remote Access | from 24.2.2 through 24.2.4 from 24.3.1 before 24.3.4 Version 25.1.1 |
| Beyondtrust | Remote Support | from 24.2.2 through 24.2.4 from 24.3.1 before 24.3.4 Version 25.1.1 |