Admin path traversal in FortiManager and FortiAnalyzer can run commands
Original title: Improper limitation of a pathname to a restricted directory
FG-IR-26-237 is a CWE-22 flaw scored CVSS 7.2 and requires existing admin privileges.
Fortinet PSIRT revised FG-IR-26-237 on November 10. A path-restriction flaw, CWE-22, in FortiManager, FortiAnalyzer, FortiManager Cloud and FortiAnalyzer Cloud may allow an authenticated attacker with admin privileges to execute unauthorized code or commands via crafted requests. The CVSSv3 score is 7.2. Versions and a fix are not given.
Unconfirmed: The snippet does not name versions, a fixed release, or exploitation.
- The weakness is improper pathname limitation, CWE-22.
- The attacker must already have admin privileges.
- Cloud editions of both products are affected.
- No CVE identifier appears in the snippet.
Impact: admin-privileged code or command execution
| Product | Affected |
|---|---|
| Fortinet FortiManager | — |
| Fortinet FortiAnalyzer | — |
| Fortinet FortiManager Cloud | — |
| Fortinet FortiAnalyzer Cloud | — |
- Vendors
- Fortinet
From the original article
CVSSv3 Score: 7. 2 An Improper Limitation of a Pathname to a Restricted Directory (CWE-22) vulnerability in FortiManager, FortiAnalyzer, FortiManager Cloud and FortiAnalyzer Cloud may allow an authenticated attacker with admin privileges to execute unauthorized code or commands via crafted requests. Revised on 2026-11-10 00:00:00
fortiguard.fortinet.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.