CVE-2025-54660

MEDIUM4.9

An active debug code vulnerability in Fortinet FortiClientWindows 7

Published Nov 18, 2025

Modified 2 months ago

Details

An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientWindows 7.0 all versions may allow a local attacker to run the application step by step and retrieve the saved VPN user password

Affected Packages

FortiClient

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1809) / Server 2019Windows 10 (1903)Windows 10 (1909)

References

ADVISORY

https://fortiguard.fortinet.com/psirt/FG-IR-25-844

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-54660

Aliases

FG-IR-25-844

CVSS Analysis

CVSS v3.1