CVE-2024-50564: Fortinet FortiClient

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versions, and 6.4.x all versions may allow a low-privileged user to decrypt interprocess communication via monitoring named piped.

Affected products

  • Fortinet FortiClient: from 6.4.0, before 7.2.9 (fixed in 7.2.9); version 7.4.0 only

Published 2025-01-14. Last modified 2026-06-17.