DLL Hijacking Vulnerability in FortiClient by Fortinet

CVE-2025-57716

What is CVE-2025-57716?

A vulnerability exists in FortiClient that allows a local low-privileged user to exploit an uncontrolled search path element. By placing a malicious DLL in the FortiClient Online Installer installation folder, an attacker may execute unauthorized code. This can lead to significant security breaches, making systems vulnerable to various forms of exploitation if not properly mitigated.

References