CVE-2025-54660

Medium · 5.5

CVSS

5.5

EPSS

0.2%

Published

Nov 18, 2025

CISA due date

—

The record

An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientWindows 7.0 all versions may allow a local attacker to run the application step by step and retrieve the saved VPN user password

Affected packages

Ecosystem	Package	Introduced	Fixed