Description
An Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local low privileged user to perform a DLL hijacking attack via placing a malicious DLL to the FortiClient Online Installer installation folder.
Affected products
fortinet: forticlient
References1
- fortiguard.fortinet.com/psirt/FG-IR-25-685 Vendor Advisory
Metrics
- CVSS 3.1
-
7.3
HIGH
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 0% percentile: 8 · as of 9 November 2026
- CWE
- CWE-427
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.