A hard‑coded cryptographic key in Fortinet FortiSandbox and FortiSandbox Cloud versions allows attackers to gain elevated privileges by sending specially crafted HTTP requests. The flaw enables the escalation of privilege within the sandbox environment, potentially allowing malicious content to be executed with higher authority than originally intended. The weakness is CWE‑321, representing improper management of cryptographic keys.

Fortinet FortiSandbox and FortiSandbox Cloud are impacted. Vulnerable releases include FortiSandbox 5.2.0 through 5.2.1, 5.0.0 through 5.0.6, and all 4.4 series. For the Cloud edition, versions 5.2.0–5.2.1, 5.0.0–5.0.6, and all 4.4 series are affected.

The CVSS score is 4.9, indicating moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the attack can be performed by sending crafted HTTP requests over the network; the attack vector is likely remote if the HTTP interface is exposed, but it may also be exploitable from internal networks. An attacker would need to identify the vulnerable instance and craft the request payload to trigger privilege escalation, indicating that the vulnerability could be leveraged if network access to the sandbox is sufficient.