Critical severity9.8NVD Advisory· Published Jun 16, 2025· Updated Jun 17, 2026

CVE-2025-5309

Description

The chat feature within Remote Support (RS) and Privileged Remote Access (PRA) is vulnerable to a Server-Side Template Injection vulnerability which can lead to remote code execution.

Affected products

Etrust/Remote Supportllm-create
Beyondtrust/Remote Support & Privileged Remote Accessllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 24.2.2

Patches

Vulnerability mechanics

References

www.beyondtrust.com/trust-center/security-advisories/bt25-04nvdMitigationVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000