PT-2025-41963 · Fortinet · Forticlientmac

Published 2025-10-14 · Updated 2025-10-16 · CVE-2025-57741

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiClientMac versions 7.0 through 7.2.11 FortiClientMac versions 7.4.0 through 7.4.3

Description An incorrect permission assignment for a critical resource may allow a local attacker to run arbitrary code or commands via LaunchDaemon hijacking. The flaw involves improper permission configurations that enable the execution of arbitrary code or commands.

Recommendations Update FortiClientMac to a version later than 7.2.11. Update FortiClientMac to a version later than 7.4.3.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

BDU:2026-05212

CVE-2025-57741

Affected Products

Forticlientmac

References · 7

• https://osv.dev/vulnerability/CVE-2025-57741 · Vendor Advisory
• https://fortiguard.fortinet.com/psirt/FG-IR-25-664 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05212 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-57741 · Security Note
• https://t.me/cveNotify/138828 · Telegram Post
• https://twitter.com/CVEnew/status/1978932606671687885 · Twitter Post
• https://twitter.com/CveTodo/status/1978141514896216223 · Twitter Post