Unrated severityNVD Advisory· Published Jun 16, 2025· Updated Feb 26, 2026

Remote Support & Privileged Remote Access server side template injection

CVE-2025-5309

Description

The chat feature within Remote Support (RS) and Privileged Remote Access (PRA) is vulnerable to a Server-Side Template Injection vulnerability which can lead to remote code execution.

Affected products

Beyondtrust/Remote Support & Privileged Remote Accessv5
Range: 24.2.2

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.beyondtrust.com/trust-center/security-advisories/bt25-04mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000