How to fix CVE-2025-62676?

Within 24 hours: Inventory all FortiClient deployments and identify systems running versions 7.4.4 or earlier. Within 7 days: Contact Fortinet for guidance on interim mitigations and prepare upgrade testing in a controlled environment. Within 30 days: Develop a phased upgrade plan to FortiClient 7.4.5 or later when released, prioritizing high-risk endpoints and remote workers.

Is Windows affected by CVE-2025-62676?

FortiClient versions up to 7.4.4 contain a critical file access vulnerability that could allow attackers to bypass security controls and access sensitive files on affected endpoints.

CVE-2025-62676

HIGH

2026-02-10 [email protected]

7.1

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

CVE Published

Feb 10, 2026 - 16:16 nvd

HIGH 7.1

Description

An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0 through 7.2.12, FortiClientWindows 7.0 all versions may allow a local low-privilege attacker to perform an arbitrary file write with elevated permissions via crafted named pipe messages.

Analysis

Forticlient versions up to 7.4.4 is affected by improper link resolution before file access (CVSS 7.1).

Technical Context

This vulnerability (CWE-59: Improper Link Resolution Before File Access) affects Forticlient. An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0 through 7.2.12, FortiClientWindows 7.0 all versions may allow a local low-privilege attacker to perform an arbitrary file write with elevated permissions via crafted named pipe messages.

Affected Products

Vendor: Fortinet. Product: Forticlient. Versions: up to 7.4.4.

Remediation

Monitor vendor advisories for a patch.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.0

CVSS: +36

POC: 0

CVE-2025-62676 vulnerability details – vuln.today

Back

CVE-2025-62676

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

CVE-2025-62676

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

External POC / Exploit Code