BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA

BeyondTrust has urgently released security updates to address critical authentication bypass vulnerabilities in its Remote Support and Privileged Remote Access products, marking a significant security concern for enterprises relying on these privileged access management solutions. The flaws, if left unpatched, could potentially allow attackers to bypass security measures entirely and gain complete control over vulnerable systems, representing a serious risk to organizational security postures.

The cybersecurity vendor confirmed two critical vulnerabilities affecting their Remote Support (RS) and Privileged Remote Access (PRA) product lines. One of these, tracked as CVE-2026-40138, carries a CVSS severity rating of 9.2, placing it in the critical category that demands immediate attention from security teams. This particular vulnerability exists as a pre-authentication flaw, meaning attackers could potentially exploit it without having any valid credentials to the system. The second vulnerability, while not fully detailed in the initial disclosure, appears to present a similar threat profile to affected environments. Organizations utilizing these BeyondTrust solutions in their operational infrastructure should consider themselves at potential risk.

The critical nature of these vulnerabilities cannot be overstated. BeyondTrust's products are specifically designed to provide secure, privileged access to critical systems across enterprise networks. By compromising these access management tools, attackers