BeyondTrust Privileged Remote Access

Reported Context (7)

BeyondTrust patched the security issue for all Remote Support and Privileged Remote Access SaaS customers on October 8, but self-hosted installations must be patched manually if automatic updates are not enabled. BeyondTrust patches zero-day exploited since late August
The report highlights rapid abuse of an AI-discovered issue in BeyondTrust Privileged Remote Access and Remote Support, along with growing targeting of AI software such as Flowise, Langflow, vLLM, Ollama, and LiteLLM. GTIG Finds Attackers Quickly Exploited an AI-Discovered BeyondTrust Flaw
One example is CVE-2026-1731, an unauthenticated OS command injection flaw in BeyondTrust Privileged Remote Access and Remote Support, discovered autonomously by the Hacktron AI research agent. Google Finds AI Is Reshaping Vulnerability Discovery and Exploitation
A notable case is CVE-2026-1731, an unauthenticated OS command injection flaw in BeyondTrust Privileged Remote Access (PRA) and Remote Support that was discovered autonomously by a third-party research agent (Hacktron Google Finds AI Is Changing Vulnerability Discovery and Exploitation Trends
Remote Code Execution (RCE) vulnerability affecting BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) software with a near-maximum CVSS score of 9.9. Wiz Highlights Agentless Detection of Attacks on Cloud Appliances and Workloads

CVE (9)

Malware (8)

People (10)

Threat Actors (1)

MITRE ATT&CK (14)

Vendors (6)

Products (25)

Tools (6)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.