Server-Side Template Injection Vulnerability in Remote Support and Privileged Remote Access by BeyondTrust
CVE-2025-5309

8.6HIGH

Key Information:

Vendor

Beyondtrust

Status
Remote Support & Privileged Remote Access
Remote Support(rs) & Privileged Remote Access(pra)
Vendor
CVE Published:
16 June 2025

What is CVE-2025-5309?

A vulnerability exists in the chat functionality of BeyondTrust's Remote Support and Privileged Remote Access software. This flaw introduces a Server-Side Template Injection risk, which could be exploited to execute arbitrary code remotely. Attackers might leverage this weakness to gain unauthorized access or control over the affected systems, posing significant security threats to users.

Affected Version(s)

Remote support & Privileged Remote Access 24.2.2 <= 24.2.4

Remote support & Privileged Remote Access 24.3.1 <= 24.3.4

Remote support & Privileged Remote Access 25.1.1

References

https://www.beyondtrust.com/trust-center/security-advisor...

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jorren Geurts of Resillion
.
CVE-2025-5309 : Server-Side Template Injection Vulnerability in Remote Support and Privileged Remote Access by BeyondTrust