CVE-2025-61624

published 2026-04-14

CVE-2025-61624: An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0…

medium 6.5 CVSS 3.1

AV N AC L PR H UI N S U C N I H A H

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitchManager 7.2.0 through 7.2.7, FortiSwitchManager 7.0.0 through 7.0.6 may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.

Affected

31 ranges · showing 25

Vendor	Product	Version range	Fixed in
fortinet	fortinet	—	—
fortinet	fortios	—	—
fortinet	fortios	>= 6.4.0 < 7.4.10	7.4.10
fortinet	fortios	6.4.0 – 6.4.16	—
fortinet	fortios	7.0.0 – 7.0.19	—
fortinet	fortios	7.2.0 – 7.2.13	—
fortinet	fortios	7.4.0 – 7.4.9	—
fortinet	fortios	>= 7.6.0 < 7.6.5	7.6.5
fortinet	fortios	7.6.0 – 7.6.4	—
fortinet	fortipam	—	—
fortinet	fortipam	—	—
fortinet	fortipam	—	—
fortinet	fortipam	>= 1.0.0 < 1.7.1	1.7.1
fortinet	fortipam	1.0.0 – 1.0.3	—
fortinet	fortipam	1.1.0 – 1.1.2	—
fortinet	fortipam	1.3.0 – 1.3.1	—
fortinet	fortipam	1.4.0 – 1.4.3	—
fortinet	fortipam	1.5.0 – 1.5.1	—
fortinet	fortipam	1.6.0 – 1.6.2	—
fortinet	fortiproxy	—	—
fortinet	fortiproxy	>= 7.0.0 < 7.4.12	7.4.12
fortinet	fortiproxy	7.0.0 – 7.0.23	—
fortinet	fortiproxy	7.2.0 – 7.2.16	—
fortinet	fortiproxy	7.4.0 – 7.4.11	—
fortinet	fortiproxy	>= 7.6.0 < 7.6.5	7.6.5

CWE-22