Sensitive Information Exposure in Fortinet FortiOS

CVE-2025-68686

What is CVE-2025-68686?

A vulnerability exists in Fortinet FortiOS versions, allowing unauthorized remote access to sensitive information. This vulnerability arises from the inability of the system to effectively enforce security measures, specifically regarding the symbolic link persistency mechanism in certain post-exploit scenarios. To exploit this vulnerability, an attacker must first gain access to the system through another underlying vulnerability, thus creating potential risks for data breaches and unauthorized information retrieval.

References