A directory traversal flaw allows an attacker to specify paths outside the intended sandbox environment, enabling them to access or modify files that are normally protected. This can break out of the sandbox and grant the attacker higher privileges, potentially compromising the host system and all data it manages. The weakness is a classic path traversal issue.

Fortinet FortiSandbox and FortiSandbox Cloud are affected. Versions 4.4.0 through 4.4.8 and 5.0.0 through 5.0.5 are vulnerable. The issue exists in both the on‑premises FortiSandbox appliance and the cloud service.

The CVSS base score of 9.1 marks this flaw as critical. An EPSS score of 24% indicates a relatively high probability of exploitation, although it is not listed in the CISA KEV catalog. The likely attack path involves a network‑reachable interface where an attacker supplies a crafted path containing "../" sequences to escape the sandbox. Successful traversal would give the attacker elevated privileges on the FortiSandbox host.