---
id: CVE-2025-68649
title: >-
  An improper limitation of a pathname to a restricted directory ('path
  traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4,
  FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions,
  FortiAnalyzer 7.0 all versi…
summary: >-
  An improper limitation of a pathname to a restricted directory ('path
  traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4,
  FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions,
  FortiAnalyzer 7.0 all versi…
severity: medium
cvss: 6
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H'
cwe:
  - CWE-22
vendor: fortinet
product: fortimanager_cloud
affected:
  - 'fortimanager_cloud >= 7.0.0, < 7.4.8'
  - 'fortimanager_cloud >= 7.6.0, < 7.6.5'
  - 'fortimanager >= 7.0.0, < 7.4.8'
  - 'fortimanager >= 7.6.0, < 7.6.5'
  - 'fortianalyzer_cloud >= 7.0.0, < 7.4.8'
  - 'fortianalyzer_cloud >= 7.6.0, < 7.6.5'
  - 'fortianalyzer >= 7.0.0, < 7.4.8'
  - 'fortianalyzer >= 7.6.0, < 7.6.5'
patched:
  - fortimanager_cloud 7.6.5
  - fortimanager 7.6.5
  - fortianalyzer_cloud 7.6.5
  - fortianalyzer 7.6.5
published: '2026-04-14'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T13:10:00.187'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-68649'
references:
  - url: 'https://fortiguard.fortinet.com/psirt/FG-IR-26-120'
    label: psirt@fortinet.com
tags:
  - nvd
epss: 0.00413
epssPercentile: 0.3374
ingestedAt: '2026-10-14T13:30:58.480Z'
---

## Overview

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer Cloud 7.6.0 through 7.6.4, FortiAnalyzer Cloud 7.4.0 through 7.4.7, FortiAnalyzer Cloud 7.2 all versions, FortiAnalyzer Cloud 7.0 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.7, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager Cloud 7.6.0 through 7.6.4, FortiManager Cloud 7.4.0 through 7.4.7, FortiManager Cloud 7.2 all versions, FortiManager Cloud 7.0 all versions may allow a privileged attacker to delete files from the underlying filesystem via crafted CLI requests.

## Affected

- `fortimanager_cloud >= 7.0.0, < 7.4.8`
- `fortimanager_cloud >= 7.6.0, < 7.6.5`
- `fortimanager >= 7.0.0, < 7.4.8`
- `fortimanager >= 7.6.0, < 7.6.5`
- `fortianalyzer_cloud >= 7.0.0, < 7.4.8`
- `fortianalyzer_cloud >= 7.6.0, < 7.6.5`
- `fortianalyzer >= 7.0.0, < 7.4.8`
- `fortianalyzer >= 7.6.0, < 7.6.5`

## Remediation

Upgrade past the affected range:

- `fortimanager_cloud 7.6.5`
- `fortimanager 7.6.5`
- `fortianalyzer_cloud 7.6.5`
- `fortianalyzer 7.6.5`