CyberCVE

CVE-2025-62676

An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0 through 7.2.12, Fort

Severity
Medium 6.4
CVSS 3.1
Adjacent, local or physical access what this means
Exploited
Not listed
EPSS
0.002
12.3th percentile
Discovered by
Third party
Vendor advisory field
Published
Feb 10, 2026
Assigned by fortinet

Description

An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0 through 7.2.12, FortiClientWindows 7.0 all versions may allow a local low-privilege attacker to perform an arbitrary file write with elevated permissions via crafted named pipe messages.

Weakness: CWE-59

Affected products

Vendor Product Category Matched by
Fortinet FortiClient Endpoint / EDR cna-assigner
Vendor-reported products (1)
  • Fortinet · FortiClientWindows

Credit

Fortinet is pleased to thank Alexander Staalgaard working with TrendAI Zero Day Initiative for reporting this vulnerability under responsible disclosure.

Vendor remediation

Upgrade to upcoming FortiClientWindows version 8.0.0 or above Upgrade to FortiClientWindows version 7.4.5 or above Upgrade to FortiClientWindows version 7.2.13 or above

References

Something wrong here?