BeyondTrust Remote Support flaw lets attackers in without a password
Canada's Centre for Cyber Security issued an alert on October 16, 2026 about a critical bug in BeyondTrust Remote Support, a tool many IT teams use to take over and fix employees' computers.
·1 min read·AB
Canada's Centre for Cyber Security issued an alert on October 16, 2026 about a critical bug in BeyondTrust Remote Support, a tool many IT teams use to take over and fix employees' computers. The flaw, tracked as CVE-2026-102764, is an authentication bypass. According to the alert, an attacker on the internet can trick internal messaging parts of the appliance into accepting requests it should reject, then upload files without logging in and without anyone clicking anything. That can lead to a full takeover of the appliance.
BeyondTrust published its advisory on October 15. The Cyber Centre says it has seen open-source reports that the bug is already being exploited. Customers on BeyondTrust's hosted SaaS service were patched by October 9 and do not need to act. Self-hosted systems running version 26.2.3 or earlier are affected. Versions 24.3.1 through 26.2.3 should get the BT26-05-RS patch, and anything older must first be upgraded to a supported version. The agency also suggests checking exposed appliances for unexpected file activity and confirming that automatic updates are turned on.
Why it matters
Remote support tools hold the keys to many machines, so an unpatched appliance is an easy way into a whole network.