【Vulnerability Alert】Fortinet Privileged Access Agent Chrome Extension Contains a Critical Security Vulnerability (CVE-2026-84388)

• Subject:【Vulnerability Alert】Fortinet Privileged Access Agent Chrome Extension Contains a Critical Security Vulnerability (CVE-2026-84388)

• Description:
  • Forwarded from TWCERT/CC Security Advisory TWCERTCC-200-202609-00000013
  • Fortinet Privileged Access Agent Chrome Extension has an improper authentication vulnerability (CVE-2026-84388, CVSS: 9.1). If a user visits a malicious website, unauthenticated remote attackers may be able to control the browser traffic of users proxied by the server.
• Affected Platforms:
  • FortiPAM Chrome Extension 8.0 all versions
  • FortiPAM Chrome Extension 7.4 all versions
• Recommended Actions:
  • Please update to the following version: FortiPAM Chrome Extension 8.0.1.123 and later
• References:
  1. https://www.twcert.org.tw/tw/cp-169-11195-827da-1.html

Computer and Communication Center
Network System Division