CVE-2020-9291: Fortinet FortiClient

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

An Insecure Temporary File vulnerability in FortiClient for Windows 6.2.1 and below may allow a local user to gain elevated privileges via exhausting the pool of temporary file names combined with a symbolic link attack.

Affected products

• Fortinet FortiClient: up to and including 6.0.9; from 6.2.0, up to and including 6.2.1

Published 2020-06-01. Last modified 2026-06-17.