FortiSandbox OS command injection Vulnerability Let Attackers execute Malicious code

Fortinet released a security advisory for FortiSandbox addressing CVE-2025-53949, an authenticated OS command injection in the product's GUI. The flaw (CVSS 7.0) affects multiple 5.0, 4.4, 4.2, and 4.0 branches; Fortinet provides patched or migration paths (e.g., 5.0.3, 4.4.8) and recommends immediate upgrades to prevent unauthorized code execution and potential system compromise.