Path traversal vulnerability in CLI

Path traversal vulnerability in CLI Fortinet PSIRT Advisories Fortinet PSIRT Contact: Website: https://fortiguard.fortinet.com/faq/psirt-contact FG-IR-24-309 Final 1 1 2025-08-12T00:00:00 Current version 2025-08-12T00:00:00 2025-08-13T00:00:00 Multiple relative path traversal vulnerabilities [CWE-23] in FortiMail, FortiVoice, FortiRecorder, FortiCamera & FortiNDR may allow a privileged attacker to read files from the underlying filesystem via crafted CLI requests. None Improper access control None Internally discovered and reported by Théo Leleu of Fortinet Product Security team. FortiCamera 2.1.4 FortiCamera 2.1.3 FortiCamera 2.1.2 FortiCamera 2.1.1 FortiCamera 2.1.0 FortiCamera 2.0.0 FortiCamera 1.1.5 FortiCamera 1.1.4 FortiCamera 1.1.3 FortiCamera 1.1.2 FortiCamera 1.1.1 FortiCamera 1.1.0 FortiCamera 1.0.5 FortiCamera 1.0.4 FortiCamera 1.0.3 FortiMail 7.6.1 FortiMail 7.6.0 FortiMail 7.4.3 FortiMail 7.4.2 FortiMail 7.4.1 FortiMail 7.4.0 FortiMail 7.2.9 FortiMail 7.2.8 FortiMail 7.2.7 FortiMail 7.2.6 FortiMail 7.2.5 FortiMail 7.2.4 FortiMail 7.2.3 FortiMail 7.2.2 FortiMail 7.2.1 FortiMail 7.2.0 FortiMail 7.0.9 FortiMail 7.0.8 FortiMail 7.0.7 FortiMail 7.0.6 FortiMail 7.0.5 FortiMail 7.0.4 FortiMail 7.0.3 FortiMail 7.0.2 FortiMail 7.0.1 FortiMail 7.0.0 FortiMail 6.4.8 FortiMail 6.4.7 FortiMail 6.4.6 FortiMail 6.4.5 FortiMail 6.4.4 FortiMail 6.4.3 FortiMail 6.4.2 FortiMail 6.4.1 FortiMail 6.4.0 FortiNDR 7.6.1 FortiNDR 7.6.0 FortiNDR 7.4.6 FortiNDR 7.4.5 FortiNDR 7.4.4 FortiNDR 7.4.3 FortiNDR 7.4.2 FortiNDR 7.4.1 FortiNDR 7.4.0 FortiNDR 7.2.5 FortiNDR 7.2.4 FortiNDR 7.2.3 FortiNDR 7.2.2 FortiNDR 7.2.1 FortiNDR 7.2.0 FortiNDR 7.1.1 FortiNDR 7.1.0 FortiNDR 7.0.7 FortiNDR 7.0.6 FortiNDR 7.0.5 FortiNDR 7.0.4 FortiNDR 7.0.3 FortiNDR 7.0.2 FortiNDR 7.0.1 FortiNDR 7.0.0 FortiRecorder 7.2.1 FortiRecorder 7.2.0 FortiRecorder 7.0.4 FortiRecorder 7.0.3 FortiRecorder 7.0.2 FortiRecorder 7.0.1 FortiRecorder 7.0.0 FortiRecorder 6.4.6 FortiRecorder 6.4.5 FortiRecorder 6.4.4 FortiRecorder 6.4.3 FortiRecorder 6.4.2 FortiRecorder 6.4.1 FortiRecorder 6.4.0 FortiVoice 7.0.3 FortiVoice 7.0.2 FortiVoice 7.0.1 FortiVoice 7.0.0 FortiVoice 6.4.9 FortiVoice 6.4.8 FortiVoice 6.4.7 FortiVoice 6.4.6 FortiVoice 6.4.5 FortiVoice 6.4.4 FortiVoice 6.4.3 FortiVoice 6.4.2 FortiVoice 6.4.1 FortiVoice 6.4.0 FortiVoice 6.0.12 FortiVoice 6.0.11 FortiVoice 6.0.10 FortiVoice 6.0.9 FortiVoice 6.0.8 FortiVoice 6.0.7 FortiVoice 6.0.6 FortiVoice 6.0.5 FortiVoice 6.0.4 FortiVoice 6.0.3 FortiVoice 6.0.2 FortiVoice 6.0.1 FortiVoice 6.0.0 Path traversal vulnerability in CLI CVE-2024-40588 FortiCamera-2.1.4 FortiCamera-2.1.3 FortiCamera-2.1.2 FortiCamera-2.1.1 FortiCamera-2.1.0 FortiCamera-2.0.0 FortiCamera-1.1.5 FortiCamera-1.1.4 FortiCamera-1.1.3 FortiCamera-1.1.2 FortiCamera-1.1.1 FortiCamera-1.1.0 FortiCamera-1.0.5 FortiCamera-1.0.4 FortiCamera-1.0.3 FortiMail-7.6.1 FortiMail-7.6.0 FortiMail-7.4.3 FortiMail-7.4.2 FortiMail-7.4.1 FortiMail-7.4.0 FortiMail-7.2.9 FortiMail-7.2.8 FortiMail-7.2.7 FortiMail-7.2.6 FortiMail-7.2.5 FortiMail-7.2.4 FortiMail-7.2.3 FortiMail-7.2.2 FortiMail-7.2.1 FortiMail-7.2.0 FortiMail-7.0.9 FortiMail-7.0.8 FortiMail-7.0.7 FortiMail-7.0.6 FortiMail-7.0.5 FortiMail-7.0.4 FortiMail-7.0.3 FortiMail-7.0.2 FortiMail-7.0.1 FortiMail-7.0.0 FortiMail-6.4.8 FortiMail-6.4.7 FortiMail-6.4.6 FortiMail-6.4.5 FortiMail-6.4.4 FortiMail-6.4.3 FortiMail-6.4.2 FortiMail-6.4.1 FortiMail-6.4.0 FortiNDR-7.6.1 FortiNDR-7.6.0 FortiNDR-7.4.6 FortiNDR-7.4.5 FortiNDR-7.4.4 FortiNDR-7.4.3 FortiNDR-7.4.2 FortiNDR-7.4.1 FortiNDR-7.4.0 FortiNDR-7.2.5 FortiNDR-7.2.4 FortiNDR-7.2.3 FortiNDR-7.2.2 FortiNDR-7.2.1 FortiNDR-7.2.0 FortiNDR-7.1.1 FortiNDR-7.1.0 FortiNDR-7.0.7 FortiNDR-7.0.6 FortiNDR-7.0.5 FortiNDR-7.0.4 FortiNDR-7.0.3 FortiNDR-7.0.2 FortiNDR-7.0.1 FortiNDR-7.0.0 FortiRecorder-7.2.1 FortiRecorder-7.2.0 FortiRecorder-7.0.4 FortiRecorder-7.0.3 FortiRecorder-7.0.2 FortiRecorder-7.0.1 FortiRecorder-7.0.0 FortiRecorder-6.4.6 FortiRecorder-6.4.5 FortiRecorder-6.4.4 FortiRecorder-6.4.3 FortiRecorder-6.4.2 FortiRecorder-6.4.1 FortiRecorder-6.4.0 FortiVoice-7.0.3 FortiVoice-7.0.2 FortiVoice-7.0.1 FortiVoice-7.0.0 FortiVoice-6.4.9 FortiVoice-6.4.8 FortiVoice-6.4.7 FortiVoice-6.4.6 FortiVoice-6.4.5 FortiVoice-6.4.4 FortiVoice-6.4.3 FortiVoice-6.4.2 FortiVoice-6.4.1 FortiVoice-6.4.0 FortiVoice-6.0.12 FortiVoice-6.0.11 FortiVoice-6.0.10 FortiVoice-6.0.9 FortiVoice-6.0.8 FortiVoice-6.0.7 FortiVoice-6.0.6 FortiVoice-6.0.5 FortiVoice-6.0.4 FortiVoice-6.0.3 FortiVoice-6.0.2 FortiVoice-6.0.1 FortiVoice-6.0.0 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:X/RC:C https://fortiguard.fortinet.com/psirt/FG-IR-24-309 Path traversal vulnerability in CLI Reference>