---
title: "Security Bulletin: FortiOS & FortiProxy Authentication Bypass"
description: CVE-2024-55591 is an Authentication Bypass Vulnerability affecting FortiOS and FortiProxy. This may allow remote attackers to gain super-admin privileges
---

[Cybersecurity Blog | RedLegg ](https://www.redlegg.com/blog)

# [Security Bulletin: FortiOS & FortiProxy Authentication Bypass](https://www.redlegg.com/blog/emergency-vulnerability-fortios-1-14-25)

 Written by [RedLegg's Cyber Threat Intelligence Team](https://www.redlegg.com/blog/author/redleggs-cyber-threat-intelligence-team) | 1/14/25 7:24 PM

About:

RedLegg will occasionally communicate vulnerabilities released outside the usual release schedule to provide additional value to our customers. These emergency bulletins describe vulnerabilities or threats we classify as the highest severity level and warrant out-of-band emergency patching or mitigation action.

## VULNERABILITIES

### FortiOS & FortiProxy Authentication bypass in Node.js Websocket Module

**CVSS Score**: 9.6 (Critical)   
**Identifier**: CVE-2024-55591   
**Exploit or POC**: Yes, this vulnerability has been exploited in the wild.   
**Update**: CVE-2024-55591 – [Fortinet Security Advisory](https://fortiguard.fortinet.com/psirt/FG-IR-24-535?utm_campaign=Threat%20Intel&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_AgOdqdQKsyaACMEL5gGYNTR21ndgzj3WCPmMIbgE-F1wvmO9aB2jvez8STjwg_Y0FzAWj)

**Description**: CVE-2024-55591 is an Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS and FortiProxy. This vulnerability may allow a remote attacker to gain super-admin privileges via crafted requests to the Node.js websocket module.

**Mitigation Recommendation**: Patching is currently the only method of mitigation. Please update to the latest software versions as listed in the [Fortinet Security Advisory](https://fortiguard.fortinet.com/psirt/FG-IR-24-535?utm_campaign=Threat%20Intel&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_AgOdqdQKsyaACMEL5gGYNTR21ndgzj3WCPmMIbgE-F1wvmO9aB2jvez8STjwg_Y0FzAWj). Immediate patching is recommended to prevent potential exploitation.

[View full post](https://www.redlegg.com/blog/emergency-vulnerability-fortios-1-14-25)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "RedLegg's Cyber Threat Intelligence Team"
  },
  "dateModified" : "2025-02-05T19:55:54.992Z",
  "datePublished" : "2025-01-14T19:24:55Z",
  "headline" : "Emergency Security Bulletin: FortiOS & FortiProxy Authentication Bypass Vulnerability",
  "image" : {
    "@type" : "ImageObject",
    "height" : 630,
    "url" : "https://www.redlegg.com/hubfs/Emergency%20Bulletin%20v2.png",
    "width" : 1200
  },
  "mainEntityOfPage" : "https://www.redlegg.com/blog/emergency-vulnerability-fortios-1-14-25",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://cdn2.hubspot.net/hubfs/4675768/logo-red-01.png",
      "width" : 419.66666
    },
    "name" : "RedLegg Cybersecurity Blog"
  }
}
```