ZDI-26-115
HIGH 7.8
Published
Feb 19, 2026
Fortinet FortiClient VPN FCConfig Utility Link Following Local Privilege Escalation Vulnerability
Fortinet
Fortinet FortiClient VPN contains a local privilege escalation vulnerability (CVE-2025-62676) that allows attackers with low-level code execution to gain elevated system privileges. This is a high-severity issue rated 7.8 CVSS that requires initial local access but could enable complete system compromise once exploited. Security teams should prioritize patching FortiClient VPN installations and implementing access controls to limit execution of untrusted code on endpoints running this software.