This vulnerability (CVE-2025-31514) in Fortinet FortiOS and FortiProxy products allows sensitive information to be inserted into log files, which may lead to information disclosure. The affected versions include FortiOS 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions, and 6.4 all versions, as well as FortiProxy versions 7.6.0 through 7.6.3, 7.4.0 through 7.4.13, 7.2 all versions, and 7.0 all versions. The vulnerability has a CVSS v3.1 base score of 2.6, indicating low severity, with an attack vector of network, low complexity, requiring high privileges, no user interaction, and partial confidentiality impact. The vendor has released an official fix for this issue.

The vulnerability may allow an attacker with high privileges to cause sensitive information to be logged in an insecure manner, potentially exposing confidential data. The impact is limited to confidentiality with no integrity or availability impact. There are no known exploits in the wild at this time.

An official fix is available from Fortinet. Users should apply the vendor-provided patches to affected FortiOS and FortiProxy versions to remediate this vulnerability. Since the vendor has released an official fix, updating to the patched versions is the recommended mitigation.