Path Traversal Vulnerability in Fortinet FortiSOAR Agent Communication Bridge
CVE-2025-54659

5.5MEDIUM

Key Information:

Vendor

Fortinet
Status
Fortisoar Agent Communication Bridge
Vendor
CVE Published:
10 March 2026

What is CVE-2025-54659?

A path traversal vulnerability exists within Fortinet's FortiSOAR Agent Communication Bridge, allowing unauthenticated attackers to craft malicious requests that may gain access to files on the system. This occurs through the agent port, where improperly limited pathname restrictions permit access to files designated for the fortisoar user, exposing sensitive information.

Affected Version(s)

FortiSOAR Agent Communication Bridge 1.1.0

FortiSOAR Agent Communication Bridge 1.0.0 <= 1.0.2

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-084

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.