Relative Path Traversal Vulnerability in FortiClientEMS by Fortinet

CVE-2025-22859

What is CVE-2025-22859?

A Relative Path Traversal vulnerability in FortiClientEMS allows a remote unauthenticated attacker to exploit the system through backend upload requests, which could lead to unauthorized arbitrary file writes. This raises significant concerns regarding the integrity and security management of server environments affected by the versions in question, highlighting the need for immediate security assessments and patching measures.

References