CVE-2025-68649
MediumCVSS 6.0Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
A path traversal vulnerability in Fortinet FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests. The issue stems from improper limitation of a pathname to a restricted directory.
Risk Assessment
A privileged attacker could delete arbitrary files from the system, potentially leading to data loss or destabilization of FortiAnalyzer/FortiManager services.
Recommendation
Update FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud to the latest versions that do not contain this vulnerability.
Other vulnerabilities in Fortinet FortiAnalyzer/FortiManager
See all- CVE-2026-23707High
An SQL Injection vulnerability (CWE-89) in Fortinet FortiAnalyzer and FortiManager (including Cloud versions) allows a low-privileged user to execute arbitrary commands via crafted requests. It affects multiple versions of Fortinet software.
- CVE-2026-23705High
An SQL Injection vulnerability (CWE-89) in Fortinet FortiAnalyzer and FortiManager allows a low-privileged user to execute arbitrary commands via crafted requests. It affects multiple versions of these products.
- CVE-2025-67604Medium
A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer and FortiManager allows an authenticated attacker to cause a system hang via multiple specially crafted HTTP requests causing crashes. Exploitation depends on internal locks being aligned, which is out of the attacker's control.
Original NVD description (English source)
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer Cloud 7.6.0 through 7.6.4, FortiAnalyzer Cloud 7.4.0 through 7.4.7, FortiAnalyzer Cloud 7.2 all versions, FortiAnalyzer Cloud 7.0 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.7, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager Cloud 7.6.0 through 7.6.4, FortiManager Cloud 7.4.0 through 7.4.7, FortiManager Cloud 7.2 all versions, FortiManager Cloud 7.0 all versions may allow a privileged attacker to delete files from the underlying filesystem via crafted CLI requests.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS