FortiSandbox OS Command Injection Vulnerability Allows Attackers to Execute Arbitrary Code

Cyberpress • December 10, 2025

Share: View original

A critical security vulnerability has been disclosed in Fortinet's FortiSandbox platform, exposing organizations to potential system compromise.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical OS Command Injection Vulnerability in FortiSandbox Disclosed A critical OS command injection vulnerability has been identified in Fortinet's FortiSandbox platform, allowing attackers to execute arbitrary code and potentially take control of affected systems. The vulnerability, tracked as CVE-2025-53949, was officially published on December 9, 2025, prompting Fortinet to issue a security update to mitigate the risk. 2 sources 38

Extracted Entities

Companies (1)

Platforms (1)

Vulnerabilities (1)

FortiSandbox OS Command Injection Vulnerability