CVE-2025-54660: Medium severity Fortinet FortiClient vulnerability
An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientWindows 7.0 all versions may allow a local attacker to run the application step by step and retrieve the saved VPN user password
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-54660?
CVE-2025-54660 is classified as a high severity vulnerability due to its potential to expose sensitive VPN user credentials.
How do I fix CVE-2025-54660?
To resolve CVE-2025-54660, users should update FortiClient to the latest version that is not affected, specifically versions beyond 7.4.3, 7.2.10, or 7.0.
Who is affected by CVE-2025-54660?
CVE-2025-54660 affects users of Fortinet FortiClient versions 7.0, 7.2.0 through 7.2.10, and 7.4.0 through 7.4.3.
What type of attack can exploit CVE-2025-54660?
CVE-2025-54660 can be exploited by local attackers to manipulate the application and gain access to stored VPN user passwords.
Is CVE-2025-54660 a remote or local vulnerability?
CVE-2025-54660 is a local vulnerability, requiring physical access to the affected system to exploit.