Exposure of private information ('privacy violation') in FortiDLP Agent - CVE-2025-53950
Published: October 15, 2025
Vulnerability identifier: #VU117213
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-53950
CWE-ID:
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local privileged user to gain access to sensitive information.
The vulnerability exists due to exposure of private information ('privacy violation'). An authenticated windows administrator can collect current user's email information.
Affected software
FortiDLP Agent
How to mitigate CVE-2025-53950
Install update from vendor's website.
FortiDLP Agent - update to 12.0.0