---
id: CVE-2026-102764
title: >-
  Improper Origin Validation in Internal Messaging Components of BeyondTrust
  Remote Support
summary: >-
  The vulnerability exists within internal components of BeyondTrust’s Remote
  Support product. The components did not adequately validate the origin of the
  messages it received. Under the right conditions, this could allow an attacker
  to p…
severity: critical
cvss: 9.3
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'
cvssSource: cna
cwe:
  - CWE-290
vendor: BeyondTrust
product: Remote Support
affected:
  - remote_support <= 26.2.3
published: '2026-10-15'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T20:30:32.240Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-102764'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-102764'
  - url: 'https://www.beyondtrust.com/blog/entry/bt26-05'
  - url: >-
      https://beyondtrustcorp.service-now.com/csm?id=csm_kb_article&sysparm_article=KB0024066
tags:
  - cve.org
ingestedAt: '2026-10-15T21:45:11.430Z'
---

## Overview

The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.

## Affected

- `remote_support <= 26.2.3`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.