FortiDLP Agent CVE-2025-54658

Requires the FortiDLP Agent for macOS with the Outlookproxy plugin installed and listening on a local port, in one of the affected version ranges (11.5.1, 11.4.2-11.4.6, 11.3.2-11.3.4, 11.2.0-11.2.3, 11.1.1-11.1.2, 11.0.1, 10.5.1, 10.4.0, 10.3.1). The attacker must already have local, authenticated access to the host (PR:L) to reach the local listening port and send the crafted path-traversal request; no user interaction is needed. Exploitation is LIMITED to macOS endpoints running this specific agent and plugin and to attackers who already possess a local foothold - it is not remotely exploitable and not usable against hosts without the Outlookproxy component active.

This is a credible but second-tier priority. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 7.8 HIGH) describes a local privilege-escalation chain: an attacker who already holds low-level authenticated access on a macOS endpoint can reach root with low attack complexity and no user interaction. The exploitation probability signals point the opposite way from the severity: EPSS is only 0.21% (11th percentile), there is no CISA KEV listing, and no public exploit code was identified in the provided data - so this is 'no public exploit identified at time of analysis' rather than active exploitation. The gating factor is the AV:L / PR:L requirement: the attacker must already be authenticated and local on the host, which sharply limits mass or remote exploitation and makes this a post-compromise escalation tool rather than an initial-access or wormable flaw. The vector and description are consistent (both indicate local, authenticated access to a local listening port), so there is no AV conflict to resolve. Net: patch it on managed macOS fleets as part of routine prioritization, but it is not a drop-everything emergency absent evidence of local footholds.

An attacker who has already obtained a low-privileged authenticated session on a macOS host running the FortiDLP Agent sends a crafted request to the local port exposed by the Outlookproxy plugin. The path-traversal flaw (CWE-22) in that plugin lets the request escape its intended restricted directory, resulting in code or file operations executed with root privileges and full compromise of the endpoint. No public proof-of-concept was identified in the provided data, and the local, authenticated prerequisite means this is used to escalate an existing foothold rather than to gain initial access.