CVE-2021-43066: Fortinet FortiClient

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below, version 6.4.6 and below, version 6.2.9 and below, version 6.0.10 and below allows attacker to escalate privilege via the MSI installer.

Affected products

• Fortinet FortiClient: from 6.0.0, before 6.4.7 (fixed in 6.4.7); from 7.0.0, before 7.0.3 (fixed in 7.0.3)

Published 2022-05-11. Last modified 2026-06-17.