DLL Hijacking Vulnerability in FortiClient by Fortinet
CVE-2025-57716

6MEDIUM

Key Information:

Vendor

Fortinet
Status
Forticlientwindows
Vendor
CVE Published:
14 October 2025

What is CVE-2025-57716?

A vulnerability exists in FortiClient that allows a local low-privileged user to exploit an uncontrolled search path element. By placing a malicious DLL in the FortiClient Online Installer installation folder, an attacker may execute unauthorized code. This can lead to significant security breaches, making systems vulnerable to various forms of exploitation if not properly mitigated.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

FortiClientWindows 7.4.0 <= 7.4.3

FortiClientWindows 7.2.0 <= 7.2.11

FortiClientWindows 7.0.0 <= 7.0.14

References

https://fortiguard.fortinet.com/psirt/FG-IR-25-685

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.