CVE-2025-61624
Authenticated admin can write or delete arbitrary files in multiple Fortinet products
A path traversal vulnerability in multiple Fortinet products allows an authenticated admin with read-write permissions to write or delete arbitrary files via specific CLI commands. Affected versions include FortiOS 7.0 through 7.6 and 6.4, FortiPAM 1.0 through 1.7, FortiProxy 7.0 through 7.6, and FortiSwitchManager 7.0 through 7.2. CISA has added it to its known exploited list, indicating active exploitation, but no fix has been released yet.
Fortinet Multiple Products · Updated 28 Oct · From the public records
Am I affected?
The records do not list fixed versions yet. Check the vendor's advisory below.
What to do
- No fix is available yet.
- No workaround has been provided in the public records.
What happened
- 16 OctCISA adds the vulnerability to its Known Exploited Vulnerabilities catalog.
- 16 OctCISA requires US federal agencies to apply mitigations by 2026-10-19.
The record
| CVE | What it is | Severity | CISA listed | Exploit chance, 30 days |
|---|---|---|---|---|
| CVE-2025-61624 | Fortinet Multiple Products Path Traversal Vulnerability | medium 5.4 | 16 Oct | 1.3% |
Our reporting
We have not reported on it. It is here because CISA added it to its list of flaws under attack.