A flaw in Fortinet FortiClientWindows allows an attacker to bypass ownership checks and gain unauthorized access to protected resources. The vulnerability stems from an unverified ownership mechanism coupled with an exposed minifilter communication port, which can be used to interact with the client. This access control weakness could let an attacker read or modify sensitive data, elevate privileges, or potentially execute code on the endpoint, depending on the capabilities of the minifilter interface.

The vulnerability impacts Fortinet FortiClientWindows version 7.4.0 through 7.4.7 and all releases of the 7.2.x branch, including 7.2.0 through 7.2.15. Users running these versions on Windows environments are at risk unless they upgrade or apply a vendor patch.

The CVSS score of 4.7 indicates a moderate risk level, while the EPSS score of < 1% suggests a very low likelihood of exploitation at present. The issue is not listed in the CISA KEV catalog, implying that widespread exploitation has not been documented. The exposed minifilter communication port is the likely entry point, indicating that the vulnerability could be exploited if the port is reachable from a local or network interface, though detailed attack prerequisites are not specified.