PT-2025-41944 · Fortinet · Fortisoar

Published 2025-10-14 · Updated 2025-11-10 · CVE-2024-48891

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiSOAR versions 7.3.x FortiSOAR versions 7.4.x FortiSOAR versions 7.5.0 through 7.5.1 FortiSOAR versions 7.6.0 through 7.6.1

Description An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') issue [CWE-78] exists. This allows an attacker with existing low-privileged, non-login shell access to perform a local privilege escalation via crafted commands. The vulnerability affects systems where an attacker has already obtained a limited level of access.

Recommendations Update FortiSOAR versions prior to 7.3.x. Update FortiSOAR versions prior to 7.4.x. Update FortiSOAR versions prior to 7.5.0. Update FortiSOAR versions prior to 7.6.0.

Fix

LPE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2024-48891

Affected Products

Fortisoar

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-48891 · Security Note
• https://fortiguard.fortinet.com/psirt/FG-IR-24-412 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-48891 · Vendor Advisory
• https://twitter.com/DavidMarquet19/status/1987792499448918375 · Twitter Post
• https://twitter.com/CVEnew/status/1978932612183056467 · Twitter Post
• https://t.me/cveNotify/138568 · Telegram Post
• https://twitter.com/CveTodo/status/1978136788104339773 · Twitter Post
• https://twitter.com/0dayPublishing/status/1980486541953712265 · Twitter Post