BeyondTrust Remote Support fails to check where internal messages actually come from, letting an unauthenticated attacker over the network trick the appliance into performing file operations on itself.