This vulnerability (CVE-2025-22862) involves an authentication bypass using an alternate path or channel (CWE-288) in Fortinet FortiProxy and FortiOS products. Specifically, it affects FortiOS versions 7.4.0 through 7.4.7, 7.2.0 through 7.2.11, 7.0.6 and above; and FortiProxy versions 7.6.0 through 7.6.2, 7.4.0 through 7.4.8, all 7.2 versions, and 7.0.5 and above. An authenticated attacker can exploit this flaw by triggering a malicious Webhook action in the Automation Stitch component, resulting in privilege escalation. The CVSS vector indicates local attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. The exploitability is partial, and the report confidence is confirmed. There is no information about patches or vendor advisories in the provided data.

An authenticated attacker with high privileges can escalate their privileges further by exploiting this vulnerability via the Automation Stitch component's Webhook functionality. This could lead to full compromise of confidentiality, integrity, and availability of the affected system. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Automation Stitch component and carefully monitor and control Webhook configurations to prevent exploitation. Follow Fortinet's security advisories for updates.