CVE-2025-62676: High severity Fortinet FortiClientWindows vulnerability

Q: What is the severity of CVE-2025-62676?

CVE-2025-62676 is classified as a medium severity vulnerability.

Q: How do I fix CVE-2025-62676?

To fix CVE-2025-62676, upgrade FortiClientWindows to the latest version provided by Fortinet.

Q: Who is affected by CVE-2025-62676?

CVE-2025-62676 affects FortiClientWindows versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.12, and all versions of 7.0.

Q: What type of vulnerability is CVE-2025-62676?

CVE-2025-62676 is an Improper Link Resolution Before File Access vulnerability.

Q: Can CVE-2025-62676 be exploited by remote attackers?

CVE-2025-62676 is primarily exploitable by local low-privilege attackers.

Published Feb 10, 2026

Updated

An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0 through 7.2.12, FortiClientWindows 7.0 all versions may allow a local low-privilege attacker to perform an arbitrary file write with elevated permissions via crafted named pipe messages.

Affected Software

3 affected components

Fortinet FortiClientWindows>=7.4.0<=7.4.4, >=7.2.0<=7.2.12, >=7.0

Fortinet FortiClient Windows>=7.0.0<7.2.13

Fortinet FortiClient Windows>=7.4.0<7.4.5

Remediation

Information

Upgrade to upcoming FortiClientWindows version 8.0.0 or above Upgrade to FortiClientWindows version 7.4.5 or above Upgrade to FortiClientWindows version 7.2.13 or above

Event History

Feb 10, 2026

CVE Published

via MITRE·03:39 PM

Data Sourced

via MITRE·03:39 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·04:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-62676?

CVE-2025-62676 is classified as a medium severity vulnerability.

How do I fix CVE-2025-62676?