Latest Fortinet FortiPAM vulnerability: CVE-2025-49201 #
Fortinet has issued an advisory for a weak authentication vulnerability in the GUI component of certain versions of Fortinet FortiPAM. This vulnerability may allow a remote, unauthenticated adversary to execute unauthorized code or commands through specially crafted HTTP requests. The vulnerability, designated CVE-2025-49201, is rated high with a base CVSS score of 7.4.
The following versions are affected
- FortiPAM 1.0 all versions
- FortiPAM 1.1 all versions
- FortiPAM 1.2 all versions
- FortiPAM 1.3 all versions
- FortiPAM 1.4 versions 1.4.0 through 1.4.2
- FortiPAM 1.5 version 1.5.0
What is Fortinet FortiPAM? #
Fortinet FortiPAM is a privileged access management solution that provides secure, centralized control and session monitoring for privileged users accessing sensitive assets and credentials across IT and OT environments.
What is the impact? #
Successful exploitation of the vulnerability would allow an adversary to execute arbitrary code on the vulnerable system, potentially leading to complete system compromise.
Are updates or workarounds available? #
Upgrade affected systems to the new versions
- FortiPAM 1.0 migrate to a fixed release
- FortiPAM 1.1 migrate to a fixed release
- FortiPAM 1.2 migrate to a fixed release
- FortiPAM 1.3 migrate to a fixed release
- FortiPAM 1.4 upgrade to version 1.4.3 or later
- FortiPAM 1.5 upgrade to version 1.5.1 or later
How to find potentially vulnerable systems with runZero #
From the Asset Inventory, use the following query to locate potentially impacted assets:
os:="Fortinet FortiPAM%"
