Path Traversal Vulnerability in Fortinet FortiOS and FortiPAM Products
CVE-2025-61624
Key Information:
- Vendor
Fortinet
- Vendor
- CVE Published:
- 14 April 2026
Badges
What is CVE-2025-61624?
A path traversal vulnerability in Fortinet's FortiOS and FortiPAM can allow an authenticated attacker with sufficient permissions to execute arbitrary file operations. By exploiting specific CLI commands, an attacker could potentially write or delete files, posing a significant risk to system integrity and confidentiality. This vulnerability impacts multiple versions of FortiOS and FortiPAM, emphasizing the need for immediate remediation to protect critical infrastructure.
CISA has reported CVE-2025-61624
CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed CVE-2025-61624 as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace
The CISA's recommendation is: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Affected Version(s)
FortiOS 7.6.0 <= 7.6.4
FortiOS 7.4.0 <= 7.4.9
FortiOS 7.2.0 <= 7.2.13