Path Traversal Vulnerability in Fortinet FortiOS and FortiPAM Products

CVE-2025-61624

What is CVE-2025-61624?

A path traversal vulnerability in Fortinet's FortiOS and FortiPAM can allow an authenticated attacker with sufficient permissions to execute arbitrary file operations. By exploiting specific CLI commands, an attacker could potentially write or delete files, posing a significant risk to system integrity and confidentiality. This vulnerability impacts multiple versions of FortiOS and FortiPAM, emphasizing the need for immediate remediation to protect critical infrastructure.

References