FortiSandbox
CVE-2025-46215: Improper Isolation or Compartmentalization in FortiSandbox
An Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an unauthenticated attacker to evade the sandboxing scan via a crafted file.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| FortiSandbox 5.0.0 to 5.0.1 | 5.0.2 or later |
| FortiSandbox 4.4.0 to 4.4.7 | 4.4.8 or later |
| FortiSandbox 4.2.1 to 4.2.8 | Upgrade past 4.2.8; see the advisory |
| FortiSandbox 4.0.0 to 4.0.6 | Upgrade past 4.0.6; see the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
An Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an unauthenticated attacker to evade the sandboxing scan via a crafted file.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 10 Oct 2026.