CVE-2025-54821
LowCVSS 1.9Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
An improper privilege management vulnerability (CWE-269) exists in Fortinet FortiOS, FortiPAM, and FortiProxy. An authenticated administrator may bypass the trusted host policy via a crafted CLI command.
Risk Assessment
Bypassing the trusted host policy may allow administrative access from unauthorized addresses, weakening access controls on Fortinet devices.
Recommendation
Upgrade FortiOS, FortiPAM, and FortiProxy to patched versions and limit administrative privileges to the minimum necessary.
Other vulnerabilities in Fortinet FortiOS/FortiPAM/FortiProxy
See all- CVE-2026-84392Low
A NULL Pointer Dereference vulnerability (CWE-476) in Fortinet FortiOS, FortiPAM and FortiProxy. An authenticated attacker can send crafted HTTP requests to crash the httpsd daemon.
- CVE-2023-36640Medium
Fortinet FortiOS, FortiPAM, and FortiProxy in the listed versions contain a use of externally-controlled format string vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted commands. The vulnerability affects multiple versions of FortiOS (7.4.0, 7.2.0-7.2.5, 7.0, 6.4, 6.2, 6.0.0-6.0.16), FortiPAM (1.1.0, 1.0), and FortiProxy (7.2.0-7.2.5, 7.0.0-7.0.11, 2.0, 1.2, 1.1, and others).
- CVE-2023-29181High
A use of externally-controlled format string vulnerability in Fortinet FortiOS, FortiPAM, and FortiProxy allows an attacker to execute unauthorized code or commands via a specially crafted command.
Original NVD description (English source)
An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.11, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow an authenticated administrator to bypass the trusted host policy via crafted CLI command.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS