Home Fortinet CVE-2025-62676
Back to Fortinet

CVE-2025-62676

FortiClient

Fortinet CVSS 7.1 Updated March 14, 2026

Executive Risk Summary

"A local low-privilege attacker may exploit the 'Link Following' vulnerability in FortiClient to perform an arbitrary file write with elevated permissions. This vulnerability affects FortiClientWindows versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.12, and all versions of 7.0."

Operational Audit Arsenal

Target Type Executable
Target Asset FortiClient.exe
Standard Path %ProgramFiles%\Fortinet\FortiClient

Manual Verification Required

This is a non-Windows asset (Fortinet). Use the target asset details above to verify your version against vendor advisories.

Patch Impact Forecast

Reboot Required Likely

Network and security services may be affected

Internal Work Notes

Apply FortiClient update to mitigate arbitrary file write vulnerability with elevated permissions

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Scope of Impact

Forticlient

Original NVD Description

"An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0 through 7.2.12, FortiClientWindows 7.0 all versions may allow a local low-privilege attacker to perform an arbitrary file write with elevated permissions via crafted named pipe messages."

Related Fortinet Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.