Businesses with a BeyondTrust Remote Support and/or Privileged Remote Access server are at risk of an attack that would grant threat actors the ability to execute operating system commands remotely.
Severity: Critical
Identified Threat
An active vulnerability has been identified in the BeyondTrust Remote Support and Privileged Remote Access software that can be exploited for pre-authentication remote code execution. This attack does not require the threat actor to use valid credentials and does not require user interaction, lowering the complexity of the attack overall.
This vulnerability, if exploited, has the potential to grant an attacker full access or control of organisational systems. This could lead to system disruption, data exfiltration, or other materially impactful incidents that would negatively impact the victim organisation.
Affected Versions: Remote Support – 25.3.1 and prior
Privileged Remote Support – 24.3.4 and prior
Please refer to: NVD-CVE-2026-1731
Recommendations
Option 1: Upgrade System to Unaffected Version
If you operate on an affected version, then upgrade your instance to a version newer than the affected version listed above.
For those using a Remote Support version older than 21.3 or Privileged Remote Access older than 221, they may need to upgrade to a newer version to apply this patch.
Please refer to: BeyondTrust Support Page
Further Recommendation: Subscribe to automatic updates
You will be able to more quickly patch vulnerabilities like this in the future by automating your updates. You can do this by subscribing to automatic updates in the appliance interface. See the BeyondTrust Support Page above.