CVE-2024-12686—BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

Vulnerability Name

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

Description

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain an OS command injection vulnerability that can be exploited by an attacker with existing administrative privileges to upload a malicious file. Successful exploitation of this vulnerability can allow a remote attacker to execute underlying operating system commands within the context of the site user.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

Unknown

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

• https://www.beyondtrust.com/trust-center/security-advisories/bt24-11
• https://nvd.nist.gov/vuln/detail/CVE-2024-12686

Related News Articles

• BeyondTrust warns of critical flaws in remote access softwareJuly 7, 2026
• CISA gives feds 3 days to patch actively exploited BeyondTrust flawFebruary 16, 2026
• BeyondTrust warns of critical RCE flaw in remote support softwareFebruary 9, 2026
• BeyondTrust warns of pre-auth RCE in Remote Support softwareJune 18, 2025
• PostgreSQL flaw exploited as zero-day in BeyondTrust breachFebruary 14, 2025

Related Weaknesses

• CWE-78