Permission Flaw in TSplus Remote Access by TSplus

CVE-2026-108072

What is CVE-2026-108072?

A vulnerability exists in TSplus Remote Access due to incorrect permissions in shared login scripts, particularly affecting the autostart1.tscr files within the shared themes directory. This flaw enables local attackers, who have valid sessions on the terminal or remote desktop server, to modify these files. As a result, they could execute arbitrary commands within another user’s security context when that user logs in using the same theme or operating mode. The exploitation of this issue can facilitate lateral movement between user accounts or lead to privilege escalation, depending on the privileges of the affected user.

References