PT-2025-41950 · Fortinet · Forticlientmac

Published 2025-10-14 · Updated 2025-10-14 · CVE-2025-31365

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FortiClientMac versions 7.2.1 through 7.2.8 FortiClientMac versions 7.4.0 through 7.4.3

Description An issue exists in FortiClientMac that could allow an unauthenticated attacker to execute arbitrary code on a user's system. This is due to an improper control of code generation. The issue can be triggered by a user visiting a malicious website. The vulnerability is well-suited for phishing campaigns targeting macOS systems.

Recommendations Update FortiClientMac to a version later than 7.2.8. Update FortiClientMac to a version later than 7.4.3.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2026-05214

CVE-2025-31365

Affected Products

Forticlientmac

References · 8

• https://fortiguard.fortinet.com/psirt/FG-IR-25-037 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-31365 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05214 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-31365 · Security Note
• https://twitter.com/CVEnew/status/1978123682464629063 · Twitter Post
• https://twitter.com/0dayPublishing/status/1978138534390153639 · Twitter Post
• https://t.me/cveNotify/138575 · Telegram Post
• https://t.me/CVEtracker/34873 · Telegram Post