CVE-2026-24018

HIGH

FortiClientLinux 7.2.2-7.4.4 - Privilege Escalation

Title source: llm

Description

A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2.12 may allow a local and unprivileged user to escalate their privileges to root.

Exploits (1)

nomisec

by febin0x10 · poc

https://github.com/febin0x10/Fortinet_FortiClient_Exploit_CVE-2026-24018

View Code ZIP pw:eip

References (1)

[Various Sources] https://fortiguard.fortinet.com/psirt/FG-IR-26-083

Scores

CVSS v3 7.8

EPSS 0.0002

EPSS Percentile 3.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-61

Status published

Products (1)

fortinet/forticlient 7.2.2 - 7.2.13

Published Mar 10, 2026

Tracked Since Mar 11, 2026