BeyondTrust Privileged Remote Access (PRA) versions prior to 25.1 contain a local authentication bypass vulnerability. This flaw allows a local authenticated attacker to view connection details of ShellJump sessions initiated with external tools, potentially granting unauthorized access to connected sessions. The vulnerability has a high severity rating with a CVSS score of 7.8.