CVE-2026-121527: Medium severity vulnerability
A execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.7, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow an authenticated local attacker with admin privileges to gain root shell access via CLI commands.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Fortinet FortiClientEMSto a version that resolves this vulnerability.Fixed in 7.4.8 - Upgrade
Upgrade
Fortinet FortiClientEMSto a version that resolves this vulnerability.Fixed in 8.0.0
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker must already have authenticated local access to the affected FortiClientEMS system and hold administrator privileges. Remote unauthenticated attackers are not described as able to exploit it.
What access could an attacker gain?
Successful exploitation may allow the local administrator to obtain a root shell through CLI commands, enabling full control of the affected system.
Which releases are affected?
Affected releases are FortiClientEMS 7.4.3 through 7.4.7, 7.4.0 through 7.4.1, and all FortiClientEMS 7.2 versions.