BeyondTrust Privileged Remote Access (PRA) versions prior to 25.1 are vulnerable to a local authentication bypass. A local authenticated attacker can view the connection details of a ShellJump session that was initiated with external tools, allowing unauthorized access to connected sessions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Beyondtrust | — | Upgrade BeyondTrust Privileged Remote Access to latest version.Upgrade BeyondTrust Remote Support to latest version. | Jul 21, 2025 | May 5, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub