CyberCVE

CVE-2025-62676

An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0 through 7.2.12, Fort

Severity
Medium 6.4
CVSS 3.1
Exploited
Not listed
EPSS
0.002
11.8th percentile
Discovered by
Not disclosed
Published
Feb 10, 2026
Assigned by fortinet

Description

An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0 through 7.2.12, FortiClientWindows 7.0 all versions may allow a local low-privilege attacker to perform an arbitrary file write with elevated permissions via crafted named pipe messages.

Weakness: CWE-59

Affected products

Vendor Product Category Matched by
Fortinet FortiClient Endpoint / EDR cna-assigner
Vendor-reported affected versions (1)
  • Fortinet · FortiClientWindows

Vendor remediation

Upgrade to upcoming FortiClientWindows version 8.0.0 or above Upgrade to FortiClientWindows version 7.4.5 or above Upgrade to FortiClientWindows version 7.2.13 or above

References