Fortinet FortiClient Mac LaunchDaemon Hijacking Vulnerability Allowing Arbitrary Code Execution

A vulnerability allowing incorrect permission assignment for critical resources has been identified in Fortinet FortiClient for Mac, specifically in versions 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, and all versions of 7.0. This vulnerability may enable a local attacker to execute arbitrary code or commands by hijacking a LaunchDaemon.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a local attacker to execute arbitrary code with elevated rights.

Remediation

Users of Fortinet FortiClient Mac should upgrade to version 7.4.4 or above if they are using FortiClient Mac 7.4, to version 7.2.12 or above if they are on FortiClient Mac 7.2, or migrate to a fixed release if they are using FortiClient Mac 7.0.