FortiDDoS Vulnerability Lets Hackers Execute Unauthorized OS Commands

Fortinet has disclosed a significant OS command injection vulnerability in its FortiDDoS-F appliances that could allow privileged attackers to execute unauthorized code or commands through the CLI. The flaw, identified as CVE-2024-45325, stems from improper neutralisation of special elements used in OS commands (CWE-78) and carries a CVSS v3.1 score of 6.5.

The vulnerability affects FortiDDoS-F command-line interface across numerous versions, with affected versions including 7.0.0 to 7.0.2 and 6.1 to 6.6, while FortiDDoS-F 7.2 is not affected. Affected organisations are advised to upgrade to 7.0.3+ and migrate from 6.1–6.6 to fixed releases, with 7.2 remaining unaffected.

The flaw was discovered internally and reported by Théo Leleu from Fortinet’s Product Security team, and Fortinet published the initial disclosure on 9 September 2025 through advisory FG-IR-24-344, according to Fortinet’s Product Security team.