CVE-2025-58034: Fortinet FortiWeb OS Command Injection Vulnerability
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.
Other sources
Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Fortinet FortiWebto a version that resolves this vulnerability.Fixed in 7.0.12 - Upgrade
Upgrade
Fortinet FortiWebto a version that resolves this vulnerability.Fixed in 7.2.12 - Upgrade
Upgrade
Fortinet FortiWebto a version that resolves this vulnerability.Fixed in 7.4.11 - Upgrade
Upgrade
Fortinet FortiWebto a version that resolves this vulnerability.Fixed in 7.6.6 - Upgrade
Upgrade
Fortinet FortiWebto a version that resolves this vulnerability.Fixed in 8.0.2 - Compensating control
Follow applicable BOD 22-01 guidance for cloud services.
- Compensating control
Discontinue use of the product if mitigations are unavailable.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58034?
CVE-2025-58034 has been categorized with a high severity level due to the potential for OS command injection.
How do I fix CVE-2025-58034?
To fix CVE-2025-58034, upgrade to Fortinet FortiWeb versions 8.0.2 or later, or apply the relevant patches provided by Fortinet.
What versions are affected by CVE-2025-58034?
CVE-2025-58034 affects Fortinet FortiWeb versions 8.0.0 to 8.0.1, 7.6.0 to 7.6.5, 7.4.0 to 7.4.10, 7.2.0 to 7.2.11, and 7.0.0 to 7.0.11.
What are the implications of CVE-2025-58034?
The implications of CVE-2025-58034 include unauthorized execution of commands on the affected FortiWeb systems, compromising data integrity and system control.
Is CVE-2025-58034 widely exploitable?
Yes, CVE-2025-58034 is considered to be widely exploitable if the affected software is accessible over the internet without proper network protections.