Clarification Request Regarding CVE Impact on FortiClient 7.2.13.1284

Hello Fortinet Team,

I would like to confirm whether FortiClient Windows version 7.2.13.1284 is affected by the recently disclosed vulnerability related to Missing Authorization CVE-2026-44278, which may allow an authenticated local attacker to decrypt a currently logged-in user’s VPN password via an unprotected DLL function.

Could you please clarify:

• Whether version 7.2.13.1284 is vulnerable
• If this issue has already been fixed in this release
• Whether any mitigation or upgrade is recommended

Thank you in advance for your assistance.