A critical remote code execution vulnerability has been discovered in multiple BeyondTrust products. The flaw, rated 9.9 out of 10 in severity, allows hackers to run code on affected systems without needing to log in. The issue was reported on February 10, 2026.
Security researchers have identified a high-severity remote code execution (RCE) flaw in several products from BeyondTrust, a cybersecurity firm. According to TechRadar, this vulnerability permits unauthorized users to execute arbitrary code on vulnerable systems without authentication, posing significant risks to organizations relying on BeyondTrust's software for privileged access management.
The bug receives a CVSS score of 9.9 out of 10, indicating its critical nature due to potential for widespread exploitation. It affects multiple BeyondTrust offerings, though specific products were not detailed in the initial report. BeyondTrust has not yet issued a public response in the available information.
This discovery underscores ongoing challenges in securing enterprise software against sophisticated attacks. Organizations using BeyondTrust products are advised to monitor for patches, as no timeline for fixes was provided in the report published on February 10, 2026.
