{"id":"CVE-2026-24018","title":"A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2.12 may allow a local and unprivileged user to escalate their privileges to root.","summary":"A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2.12 may allow a local and unprivileged user to escalate their privileges to root.","severity":"high","cvss":7.4,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C","cvssSource":"cna","cwe":["CWE-61"],"vendor":"Fortinet","product":"FortiClientLinux","affected":["FortiClientLinux >= 7.4.0 <= 7.4.4","FortiClientLinux >= 7.2.2 <= 7.2.12"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-03-11T03:56:55.161799Z"},"exploitAvailable":true,"published":"2026-03-10","updated":"2026-11-06","sourceUpdated":"2026-11-06T15:42:11.260Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-24018","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-083","label":"https://fortiguard.fortinet.com/psirt/FG-IR-26-083"}],"tags":["cve.org","exploit-available"],"epss":0.00265,"epssPercentile":0.18478,"exploits":{"github":1,"githubRepos":["https://github.com/febin0x10/Fortinet_FortiClient_Exploit_CVE-2026-24018"],"checkedAt":"2026-11-08T19:17:50.972Z"},"ingestedAt":"2026-11-06T15:54:03.980Z","slug":"CVE-2026-24018","body":"## Overview\n\nA UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2.12 may allow a local and unprivileged user to escalate their privileges to root.\n\n## Affected\n\n- `FortiClientLinux >= 7.4.0 <= 7.4.4`\n- `FortiClientLinux >= 7.2.2 <= 7.2.12`\n\n## Remediation\n\nUpgrade to FortiClientLinux version 8.0.0 or above\nUpgrade to FortiClientLinux version 7.4.5 or above\nUpgrade to FortiClientLinux version 7.2.13 or above","depth":"midnight","depthScore":53,"depthScoreParts":{"impact":40.7,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[]}