CVE-2025-62676

MEDIUM6.4

An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7

Published Feb 10, 2026

Modified 6 days ago

Details

An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0 through 7.2.12, FortiClientWindows 7.0 all versions may allow a local low-privilege attacker to perform an arbitrary file write with elevated permissions via crafted named pipe messages.

Affected Packages

FortiClient

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1809) / Server 2019Windows 10 (1903)Windows 10 (1909)

References

ADVISORY

https://fortiguard.fortinet.com/psirt/FG-IR-25-661

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-62676

Aliases

FG-IR-25-661

CVSS Analysis

CVSS v3.1