Fortinet has released a security update addressing CVE-2025-61624, a path traversal vulnerability (a vulnerability that allows access to files outside the intended path) affecting the CLIs of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager.
The affected versions are as follows:
All versions of FortiOS 6.4, All versions of 7.0, All versions of 7.2, Versions 7.4.0 Through 7.4.9, And versions 7.6.0 Through 7.6.4.
All versions of FortiPAM from 1.0 Through 1.7.0.
All versions of FortiProxy 7.0, All versions of 7.2, Versions 7.4.1 Through 7.4.11, And versions 7.6.0 Through 7.6.4.
FortiSwitchManager versions 7.0.0 Through 7.0.6 And 7.2.0 Through 7.2.7.
The versions that have been patched are as follows:
FortiOS 7.4.10 And later, 7.6.5 And later, 8.0.0 And later.
FortiPAM 1.7.1 And later, 1.8.0 And later.
FortiProxy 7.4.12 Or later, 7.6.5 Or later.
FortiSwitchManager 7.0.7 Or later, 7.2.8 Or later.
Fortinet recommends updating to the latest version of the Vulnerability Patch in accordance with the instructions on the reference site.
