Unrated severityCISA KEVNVD Advisory· Published Dec 17, 2024· Updated Oct 21, 2025

Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)

CVE-2024-12356

Description

A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.

Affected products

BeyondTrust/Remote Supportv5
Range: 0
BeyondTrust/Privileged Remote Accessv5
Range: 0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

nvd.nist.gov/vuln/detail/CVE-2024-12356mitre
www.beyondtrust.com/trust-center/security-advisories/bt24-10mitre
www.cve.org/CVERecordmitre

News mentions

Exploits and vulnerabilities in Q1 2026
Securelist · May 7, 2026

cvss	0.000
epss	0.075
exploit	0.030
kev	0.120
patch	0.000
ransomware	0.000