BeyondTrust Remote Support appliance (internal message handling): Internal components of the Remote Support appliance

Impact

Internal components of the Remote Support appliance do not adequately validate where the messages they process came from, so an attacker who can reach the appliance can drive file operations on it without authenticating. A remote-support appliance is a privileged entry point: it brokers interactive sessions into servers across the estate and stores the credentials and session artifacts that go with them, so file-level control over it is a path to tampering with that brokering and to harvesting what is kept there. CISA lists this CVE as known-exploited, which makes it an in-the-wild problem rather than a theoretical one. For an operator this is a jump-box compromise, not a workload compromise - GPU nodes are not touched directly, but the thing used to reach them is.

Who can reach it

Anyone who can reach the appliance over the network. The vendor record and the CVSS vector (AV:N/PR:N/UI:N) indicate no authentication and no user interaction are required, so internet-exposed or broadly reachable appliances are the urgent case.

What to do

Apply the BeyondTrust-supplied update for Remote Support per KB0024066 / advisory BT26-05; the published record does not name a fixed version string, so take the version the vendor's article points to for your deployment. This is an appliance update with a service restart, not a fleet-wide maintenance event - no GPU nodes need draining. Until it is applied, restrict network reach to the appliance to known administrative sources and treat an exposed, unpatched appliance as potentially already compromised given the active exploitation.

References

Related entries

• Citrix NetScaler ADC and Gateway: unauthenticated remote compromise of the applianceCVE-2026-19490 · Citrix NetScaler ADC / GatewayCritical
• Backpropagate (single-GPU LLM fine-tuning library) - Reflex web UI: The optional web UI exposes a training controlCVE-2026-48797 · Backpropagate (single-GPU LLM fine-tuning library) - Reflex web UICritical
• Assisted Migration Agent (hardcoded insecure TLS to vCenter): The agent hardcodes insecure TLS when talking to vCenterCVE-2026-53475 · Assisted Migration Agent (hardcoded insecure TLS to vCenter)Critical
• Linux liquidio driver (Marvell/Cavium, cached VF pci_dev lookup table): The LiquidIO PF caches VF `pci_dev` pointersCVE-2026-72329 · Linux liquidio driver (Marvell/Cavium, cached VF pci_dev lookup table)Critical
• Dell Secure Connect Gateway: exposed Docker socket gives a local user or container host rootCVE-2026-80238 · Dell Secure Connect Gateway 5.0 (orchestrator container / exposed Docker socket)Critical
• MinIO (OIDC authentication): JWT algorithm confusion in the OIDC login path lets an attacker present a token the serverCVE-2026-33322 · MinIO (OIDC authentication)Critical