CVE-2025-62676

published 2026-02-10

CVE-2025-62676: An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4…

high 7.1 CVSS 3.1

AV L AC L PR L UI N S U C N I H A H

An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0 through 7.2.12, FortiClientWindows 7.0 all versions may allow a local low-privilege attacker to perform an arbitrary file write with elevated permissions via crafted named pipe messages.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
fortinet	forticlient	—	—
fortinet	forticlient	>= 7.0.0 < 7.2.13	7.2.13
fortinet	forticlient	>= 7.4.0 < 7.4.5	7.4.5
fortinet	forticlientwindows	—	—
fortinet	forticlientwindows	7.0.0 – 7.0.14	—
fortinet	forticlientwindows	7.2.0 – 7.2.12	—
fortinet	forticlientwindows	7.4.0 – 7.4.4	—
fortinet	fortinet	—	—

CWE-59