{"id":"CVE-2026-102764","published":"2026-10-15T21:17:00.117","lastModified":"2026-10-17T04:16:47.117","description":"The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-290"],"vendors":["beyondtrust"],"products":["remote support"],"references":[{"url":"https://beyondtrustcorp.service-now.com/csm?id=csm_kb_article&sysparm_article=KB0024066","tags":["Permissions Required"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102764","tags":["US Government Resource"]},{"url":"https://www.beyondtrust.com/blog/entry/bt26-05","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102764","tags":["US Government Resource"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The BeyondTrust Remote Support product has a vulnerability where it fails to properly validate the source of incoming messages, allowing attackers to perform unauthorized file operations on the appliance. This represents a critical security flaw that could lead to complete system compromise.","exploitability":"Exploitation appears moderately difficult as it requires specific conditions to be met, likely involving crafting malicious messages that can bypass the validation checks and gain access to the appliance's file system operations.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary file operations on the BeyondTrust appliance, potentially leading to complete system compromise, data exfiltration, or persistent access to the network.","remediation":"Upgrade to BeyondTrust Remote Support version 2.590 or later to address this authentication bypass vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","remote-access","file-operations","appliance"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:45:57.241Z"}}