FortiClientLinux vulnerabilities

3 known vulnerabilities in FortiClientLinux from Fortinet. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  FortiClientLinux: UNIX Symbolic Link (Symlink) Following

  CVE-2026-24018Mar 10, 2026Fortinet

  A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2.12 may allow a local and unprivileged user to escalate their privileges to root.

• 8.1 High severity

  FortiClientMac: Improper Certificate Validation

  CVE-2024-31489Sep 10, 2024Fortinet

  AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.0.11, FortiClientLinux 7.2.0, 7.0.0 through 7.0.11 and FortiClientMac 7.0.0 through 7.0.11, 7.2.0 through 7.2.4 may allow a remote and unauth

• 8.8 High severity

  FortiClientLinux: Improper Control of Generation of Code

  CVE-2023-45590Apr 9, 2024FortinetEPSS 1.52%

  An improper control of generation of code ('code injection') in Fortinet FortiClientLinux version 7.2.0, 7.0.6 through 7.0.10 and 7.0.3 through 7.0.4 allows attacker to execute unauthorized code or commands via tricking a FortiClientLinux user into visiting a