Fortinet FortiSandbox Path Traversal Vulnerability Allowing Privilege Escalation

Vulnerability

A path traversal vulnerability has been identified in Fortinet FortiSandbox versions 5.0.0 through 5.0.5 and 4.4.0 through 4.4.8. This vulnerability may allow an unauthenticated attacker to bypass authentication and escalate privileges via specially crafted HTTP requests to the JRPC API.

Impact

Exploitation of this vulnerability could lead to unauthorized authentication bypass and privilege escalation.

Remediation

Users can upgrade to Fortinet FortiSandbox version 5.0.6 or 4.4.9 or above, depending on their current version.

Added: Apr 14, 2026, 4:43 PM
Updated: Apr 14, 2026, 4:43 PM

Vulnerability Rating

Custom Algorithm
spread
2.6
impact
5.0
exploitability
7.0
remediation
7.7
relevance
5.9
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.