CVE-2025-22862

Name of the Vulnerable Software and Affected Versions: FortiOS versions 7.2 FortiProxy versions 7.2

Description: An authentication bypass issue exists in FortiOS and FortiProxy due to a flaw in the Automation Stitch component. An authenticated attacker can elevate privileges by triggering a malicious Webhook action.

Recommendations: FortiOS version 7.2: At the moment, there is no information about a newer version that contains a fix for this vulnerability. FortiProxy version 7.2: At the moment, there is no information about a newer version that contains a fix for this vulnerability.