CVE-2024-47574: Fortinet FortiClient

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 through 6.4.0 allows low privilege attacker to execute arbitrary code with high privilege via spoofed named pipe messages.

Affected products

• Fortinet FortiClient: from 6.4.0, before 7.0.13 (fixed in 7.0.13); from 7.2.0, before 7.2.5 (fixed in 7.2.5); version 7.4.0 only

Published 2024-11-13. Last modified 2026-06-17.