CVE-2025-57741

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-57741
An Incorrect Permission Assignment for Critical Resource vulnerability [CWE-732] in FortiClientMac 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local attacker to run arbitrary code or commands via LaunchDaemon hijacking.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://fortiguard.fortinet.com/psirt/FG-IR-25-664 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*
cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*
History

15 Oct 2025, 17:23

Type Values Removed Values Added
First Time Fortinet
Fortinet forticlient
CPE cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*
References () https://fortiguard.fortinet.com/psirt/FG-IR-25-664 - () https://fortiguard.fortinet.com/psirt/FG-IR-25-664 - Vendor Advisory

14 Oct 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-10-14 16:15

Updated : 2025-10-15 17:23

NVD link : CVE-2025-57741

Mitre link : CVE-2025-57741

CVE.ORG link : CVE-2025-57741

JSON object : View

Products Affected

fortinet

  • forticlient
CWE
CWE-732

Incorrect Permission Assignment for Critical Resource