CVE-2026-25691
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
Fortinet FortiSandbox (5.0.0–5.0.5, 4.4.0–4.4.8, all 4.2 versions, FortiSandbox Cloud 5.0.4, and PaaS 5.0.4) contains a path traversal vulnerability. A privileged attacker with super-admin profile and CLI access can delete an arbitrary directory via crafted HTTP requests.
Risk Assessment
A highly privileged attacker could destroy critical data or system files, causing severe service disruption.
Recommendation
Restrict CLI access and super-admin privileges to essential personnel and apply the Fortinet patch as soon as available.
Other vulnerabilities in Fortinet FortiSandbox
See all- CVE-2026-26084Critical
An improper access control vulnerability in Fortinet FortiSandbox versions 5.0.0 through 5.0.5, 4.4.0 through 4.4.8, Cloud 5.0.4 through 5.0.5, and PaaS 5.0.4 through 5.0.5 may allow an attacker to access sensitive information via crafted HTTP requests.
- CVE-2025-54353Medium
A Cross-site Scripting (XSS) vulnerability in Fortinet FortiSandbox versions 5.0.0 through 5.0.2, 4.4.0 through 4.4.7, 4.2 all versions, and 4.0 all versions may allow an attacker to perform an XSS attack via crafted HTTP requests.
Original NVD description (English source)
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4, FortiSandbox PaaS 5.0.4 may allow a privileged attacker with super-admin profile and CLI access to delete an arbitrary directory via HTTP crafted requests.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS