PT-2026-7275 · Fortinet · Forticlientwindows

Published 2026-02-10 · Updated 2026-02-20 · CVE-2025-62676

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fortinet FortiClientWindows versions 7.0.0 through 7.4.4 Fortinet FortiClientWindows versions 7.2.0 through 7.2.12

Description A flaw exists in Fortinet FortiClientWindows that allows a local, low-privilege attacker to perform arbitrary file writes with elevated permissions. This is due to an improper link resolution before file access, specifically a Time-of-Check-to-Time-of-Use (TOCTOU) condition. The issue is triggered by crafted named pipe messages.

Recommendations FortiClientWindows versions 7.0.0 through 7.0.9 should be updated. FortiClientWindows versions 7.1.0 through 7.1.9 should be updated. FortiClientWindows versions 7.2.0 through 7.2.12 should be updated. FortiClientWindows versions 7.3.0 through 7.3.9 should be updated. FortiClientWindows versions 7.4.0 through 7.4.4 should be updated.

Fix

LPE

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

BDU:2026-02560

CVE-2025-62676

ZDI-26-115

Affected Products

Forticlientwindows

References · 8

• https://fortiguard.fortinet.com/psirt/FG-IR-25-661 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-62676 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02560 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-62676 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-115 · Security Note
• https://twitter.com/0dayPublishing/status/2023156550332756279 · Twitter Post
• https://twitter.com/Sh4hdov/status/2024664908642586893 · Twitter Post
• https://twitter.com/transilienceai/status/2024688414294233289 · Twitter Post