Fortinet Multiple Products Path Traversal Vulnerability

A path traversal vulnerability has been identified in multiple Fortinet products including FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager. The vulnerability allows an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands. The flaw is tracked as CVE-2025-61624 and has been assigned a high criticality rating. CISA has referenced this vulnerability under BOD 26-04, which prioritizes security updates based on risk. Fortinet has published an advisory under FG-IR-26-122. Organizations using affected Fortinet products are advised to apply patches promptly. The vulnerability poses a significant risk as it can lead to unauthorized file manipulation on affected systems.