Unrated severityNVD Advisory· Published Oct 14, 2025· Updated Feb 26, 2026
CVE-2025-31365
CVE-2025-31365
Description
An Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] in FortiClientMac 7.4.0 through 7.4.3, 7.2.1 through 7.2.8 may allow an unauthenticated attacker to execute arbitrary code on the victim's host via tricking the user into visiting a malicious website.
Affected products
2- Fortinet/FortiClientMacv5cpe:2.3:a:fortinet:forticlientmac:7.4.3:*:*:*:*:*:*:*Range: 7.4.0
- Range: >=7.2.1 <=7.2.8 or >=7.4.0 <=7.4.3
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.