BeyondTrust Remote Support’s internal messaging components lack proper origin validation, allowing an attacker to forge messages that the appliance accepts and processes. The flaw permits malicious actors to perform file operations on the appliance, such as reading, writing, or deleting files, which can compromise the integrity of critical system configurations and data. The weakness is classified under CWE‑290, highlighting insufficient authentication of inter‑process messages.

The vulnerability affects the BeyondTrust Remote Support product, specifically its internal messaging components. No specific product versions are disclosed; therefore any deployment that includes these components is potentially impacted.

The CVSS score of 9.3 combined with an EPSS estimate of 78% reflects a high likelihood of exploitation, further underscored by its inclusion in CISA’s KEV catalog. The description states that the component fails to validate message origins, which could allow an attacker to manipulate file operations on the appliance. Based on the description, it is inferred that an attacker may attempt to send crafted messages to the appliance’s messaging interfaces over the network; however, the CVE description does not explicitly confirm remote attackability. Given the severity and probability, the vulnerability represents a significant security risk.