FortiOS CLI Bypass Flaw Lets Attackers Run Arbitrary System Commands

Fortinet has disclosed a security vulnerability in its FortiOS operating system that could let attackers with administrative privileges run arbitrary system commands by bypassing CLI restrictions, tracked as CVE-2025-58325. The flaw, discovered internally by Fortinet’s PSIRT team and published on 14 October 2025, affects the FortiOS CLI component and enables local authenticated attackers to execute commands through specially crafted CLI inputs.

With a CVSS v3.1 score of 7.8, the vulnerability is rated high, with potential for complete system compromise and privilege escalation once exploited. FortiOS versions across several branches are affected, including 6.4 all versions, 7.0.0 through 7.0.15, 7.2.0 through 7.2.10, 7.4.0 through 7.4.5, and 7.6.0, with recommended upgrades to 7.6.1, 7.4.6, 7.2.11, or 7.0.16 depending on the current branch. Fortinet suggests organisations migrate to fixed releases, as no patch is available for the end-of-life 6.4 line.

The advisory lists a wide range of FortiGate models as affected and notes that the attack requires local access and administrative credentials.