Skip to main content
3 reportsPriority High

BeyondTrust Remote Support Authentication Bypass

A vulnerability in BeyondTrust Remote Support allows unauthenticated access and potential code execution, posing a risk to UK organisations using the software.

First report Latest

What is going on

  • A vulnerability in BeyondTrust Remote Support was reported that allows unauthenticated attackers to write files and execute code as the operating-system user.
  • The flaw was added to CISA's known-exploited catalogue following reports of active exploitation in the wild.
  • A separate report linked the same vulnerability to Chinese state-sponsored activity, though no specific attacks were detailed.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed