CVE-2026-121527 · Vendor
NO FIX YET
FortiClientEMS versions 7.4.0 through 7.4.7 and all 7.2 releases run a CLI command path with unnecessary privileges. An authenticated local user with admin rights can use CLI commands to get a root shell on the server.
first public Nov 11, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Organisations running FortiClientEMS 7.4.0 through 7.4.7 or any 7.2 release. Exposure requires an account with admin privileges on the EMS server, so the risk is mainly from insiders or someone who has already compromised an admin login. The sources do not say whether specific configurations change exposure.
Not affected if no-admin-access-to-ems
Who cares forticlientems, fortinet, self-hosted, windows
No fix yet, per the sources.
A execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.7, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow an authenticated local attacker with admin privileges to gain root shell access via CLI commands.
This page as .md · .json · CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.