Improper Privilege Management in Fortinet FortiOS, FortiProxy, and FortiWeb

CVE-2025-22254

What is CVE-2025-22254?

An Improper Privilege Management vulnerability affecting multiple versions of Fortinet FortiOS, FortiProxy, and FortiWeb allows an authenticated attacker with read-only admin permissions to escalate their privileges to super-admin. This exploitation can occur via specially crafted requests sent to the Node.js websocket module, potentially enabling unauthorized control over the affected systems. To mitigate this risk, it is crucial for users to apply the latest security updates and monitor for any suspicious activity.

References