BeyondTrust Remote Support (RS)和Privileged Remote Access (PRA)操作系统命令注入漏洞

详细信息

漏洞类型

其他

漏洞描述

BeyondTrust Remote Support和BeyondTrust Privileged Remote Access（BeyondTrust PRA）都是美国BeyondTrust公司的产品。BeyondTrust Remote Support是一个适用于Windows、Mac、Linux、Ios（iPad、iPhone）等的远程桌面访问、服务台和协作软件。BeyondTrust Privileged Remote Access是一款特权远程访问软件。BeyondTrust Remote Support和BeyondTrust Privileged Remote Access在处理WebSocket请求时，thin-scc-wrapper脚本对WebSocket连接中的remoteVersion参数验证不充分，当攻击者向特定的端点发送经过精心构造的数据包时，这些输入会被直接传递给底层的操作系统shell执行。

修复建议

Remote Support (RS)请升级至版本25.3.2或更高版本，或应用专用补丁Patch BT26-02-RS。Privileged Remote Access (PRA)请升级至版本25.1.1或更高版本，或应用补丁Patch BT26-02-PRA。参考链接： https://www.beyondtrust.com/trust-center/security-advisories/bt26-02

参考链接

• https://access.redhat.com/security/cve/cve-2026-1731

  CNNVD

• https://beyondtrustcorp.service-now.com/csm?id=csm_kb_article&sysparm_article=KB0023293

  CVE · Permissions Required

• https://github.com/win3zz/CVE-2026-1731

  NVD · Third Party Advisory · Exploit

• https://www.beyondtrust.com/trust-center/security-advisories/bt26-02

  CVE · Vendor Advisory

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-1731

  NVD · US Government Resource

• https://www.greynoise.io/blog/reconnaissance-beyondtrust-rce-cve-2026-1731

  NVD · Third Party Advisory