What is GHSA-hg7x-vp9f-fjh2?

GHSA-hg7x-vp9f-fjh2 is a security advisory published by GitHub Security Advisories with Low severity. An Improper Privilege Management vulnerability [CWE-269] in Fortinet FortiOS 7.6.0 through 7.6.3,...

Which CVE IDs does GHSA-hg7x-vp9f-fjh2 cover?

GHSA-hg7x-vp9f-fjh2 covers the following CVE IDs: CVE-2025-54821. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hg7x-vp9f-fjh2?

GHSA-hg7x-vp9f-fjh2 has a CVSS v3 base score of 1.9, published by GitHub Security Advisories.

GHSA-hg7x-vp9f-fjh2LowCVSS 1.9

An Improper Privilege Management vulnerability [CWE-269] in Fortinet FortiOS 7.6.0 through 7.6.3,...

Vendor

GitHub Security Advisories

Published

November 18, 2025

Last Modified

June 9, 2026

🔗 CVE IDs covered (1)

CVE-2025-54821 →

📋 Description

An Improper Privilege Management vulnerability [CWE-269] in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow an authenticated administrator to bypass the trusted host policy via crafted CLI command.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-54821
https://fortiguard.fortinet.com/psirt/FG-IR-25-545
https://cert-portal.siemens.com/productcert/html/ssa-864900.html
https://github.com/advisories/GHSA-hg7x-vp9f-fjh2