CVE-2025-22862
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiOS 7.4.0 through 7.4.7, 7.2.0 through 7.2.11, 7.0.6 and above; and FortiProxy 7.6.0 through 7.6.2, 7.4.0 thr
Description
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiOS 7.4.0 through 7.4.7, 7.2.0 through 7.2.11, 7.0.6 and above; and FortiProxy 7.6.0 through 7.6.2, 7.4.0 through 7.4.8, 7.2 all versions, 7.0.5 and above may allow an authenticated attacker to elevate their privileges via triggering a malicious Webhook action in the Automation Stitch component.
Weakness: CWE-288
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Fortinet | FortiOS | Firewall / NGFW | cna-assigner |
| Fortinet | FortiProxy | SASE / SSE / Secure Web | cna-assigner |
Vendor-reported products (3)
- Fortinet · FortiProxy
- Fortinet · FortiOS
- Siemens · RUGGEDCOM APE1808
Credit
Fortinet is pleased to thank Francesco Caserta, Alessandro Esposito, Andrea Lomuscio and Alessandro Ruggieri from the Italian National Cybersecurity Agency (ACN) for reporting this vulnerability under responsible disclosure.
Vendor remediation
Fortinet remediated this issue in FortiSASE version 25.2.a and hence customers do not need to perform any action. Upgrade to FortiProxy version 7.6.3 or above Upgrade to FortiProxy version 7.4.9 or above Upgrade to FortiOS version 7.6.0 or above Upgrade to FortiOS version 7.4.8 or above Upgrade to FortiOS version 7.2.12 or above