CVE-2025-53949: OS command injection in multiple endpoints
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiSandbox may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests.
Other sources
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53949?
The severity of CVE-2025-53949 is considered high, as it allows authenticated attackers to execute unauthorized code on the system.
How do I fix CVE-2025-53949?
To fix CVE-2025-53949, update FortiSandbox to version 5.0.3 or later, or 4.4.8 or later, depending on your current version.
Which versions of FortiSandbox are affected by CVE-2025-53949?
CVE-2025-53949 affects FortiSandbox versions from 4.0 to 5.0.2.
What type of vulnerability is CVE-2025-53949?
CVE-2025-53949 is an OS command injection vulnerability leading to improper neutralization of special elements.
Can CVE-2025-53949 be exploited remotely?
Yes, CVE-2025-53949 can be exploited by authenticated attackers through crafted HTTP requests.