CVE-2025-5309 — Remote Support & Privileged Remote Access server side template injection

CVE-2025-5309

Remote Support & Privileged Remote Access server side template injection PUBLISHED

Description (CNA)

The chat feature within Remote Support (RS) and Privileged Remote Access (PRA) is vulnerable to a Server-Side Template Injection vulnerability which can lead to remote code execution.

Affected (CNA)

Vendor / product	Versions
BeyondTrust / Remote support & Privileged Remote Access	affected 24.2.2 through 24.2.4; affected 24.3.1 through 24.3.3; affected 25.1.1
BeyondTrust / Remote Support(RS) & Privileged Remote Access(PRA)	affected 24.2.2 through 24.2.4; affected 24.3.1 through 24.3.4; affected 25.1.1

CWE

CWE-94

References

https://www.beyondtrust.com/trust-center/security-advisories/bt25-04

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.