Posting Date: 2026/09/17

【Vulnerability Alert】Fortinet Privileged Access Agent Chrome Extension Contains a Critical Security Vulnerability (CVE-2026-84388)

  • Subject:【Vulnerability Alert】Fortinet Privileged Access Agent Chrome Extension Contains a Critical Security Vulnerability (CVE-2026-84388)


  • Description:
    • Forwarded from TWCERT/CC Security Advisory TWCERTCC-200-202609-00000013
    • Fortinet Privileged Access Agent Chrome Extension has an improper authentication vulnerability (CVE-2026-84388, CVSS: 9.1). If a user visits a malicious website, unauthenticated remote attackers may be able to control the browser traffic of users proxied by the server.
  • Affected Platforms:
    • FortiPAM Chrome Extension 8.0 all versions
    • FortiPAM Chrome Extension 7.4 all versions
  • Recommended Actions:
    • Please update to the following version: FortiPAM Chrome Extension 8.0.1.123 and later
  • References:
    1. https://www.twcert.org.tw/tw/cp-169-11195-827da-1.html

Computer and Communication Center
Network System Division