Is FortiClient 7.4.3 the last ever free version?

[DCG-Chris]

There is a vulnerability on 7.4.3 and the remediation is to upgrade to 7.4.4, however 7.4.4 does not include the free version.

The release notes state that it does not include the free version as no feature updates were made between the versions but i've heard rumours that 7.4.3 will be the last free version ever.

Will the 7.4.4 free version be released, or do those client need to be vulnerable until 7.4.5 is released and hope this includes the free version? Does anyone have any idea when this will be released?

[ThibElie]

Nope, just no code change in the free version.

No new version of VPN-only agent

FortiClient (Windows) 7.4.4 does not include a new version of the free VPN-only agent as no feature updates were made to the free VPN-only agent between 7.4.3 and 7.4.4. Users can continue to use the FortiClient (Windows) 7.4.3 free VPN-only agent.

https://docs.fortinet.com/document/forticlient/7.4.4/windows-release-notes/683433/special-notices

[DCG-Chris]

That was how we initially read it as well, but we're being told by our distributor that 7.4.3 is the last free version Fortinet will provide and the solution for all of our customers using the free (now vulnerable) version is to pay for 7.4.4.

Have you heard that the free version will continue to be supported going forward?

[RHHSupport]

Forticlient version 7.4.3 and Forticlient VPN 7.4.3 have a vulnerability: CVE-2025-46373 with a high Severity! There is no VPN 7.4.4 Client available. Fortinet is distributing the older vulnerable version trough the fortinet.com website.

[MG4]

No, older versions are also affected. The CVE states that versions 7.4.0 through 7.4.3 are affected. 

[tk189]

Fortinet is long overdue to make an official announcement regarding the future of FortiClient Free.
Partners and customers are losing trust with this kind of communication.

[DCG-Chris]

Has anyone heard anything from Fortinet or their own distributors about this?

We've been told by multiple sources but still hoping it's not the case.

There's now 2x critical vulnerabilities to 7.4.3, are Fortinet going to wait until it's the cause of a major breach before patching?

[RHHSupport]

Release notes of the new client 7.4.5:

No new version of VPN-only agent
FortiClient (Windows) 7.4.4-7.4.5 do not include a new version of the free VPN-only agent as no feature updates were made to the free VPN-only agent between 7.4.3 and 7.4.5. Users can continue to use the FortiClient (Windows) 7.4.3 free VPN-only agent......

[DCG-Chris]

Yes, very disappointing.

Such a poor reason for not providing it. I'm now expecting there to be a huge breach(es) due to this and a mass migration off of Fortinet.

The only advice Fortinet were offering was to downgrade to 7.2.12

[ThibElie]

Regarding the CVE, Fortinet released an new CSB-251210-1:

Description:

FortiClient Windows 7.4.3 is no longer impacted by the following CVEs.

• CVE-2025-46373

• CVE-2025-47761

• CVE-2025-66535

Possibly Affected Products:

FortiClient Windows 7.4.2 and earlier.

Remedy:

Fortinet has addressed the CVEs as follows:

• CVE-2025-46373 is resolved in 7.2.9 and later; 7.4.3 and later

• CVE-2025-47761 is resolved in 7.2.10 and later; 7.4.3 and later

• CVE-2025-66535 is resolved in 7.4.3 and later

Resolution:

An updated version of the FortiClient Windows 7.4.3 VPN only client has been re-uploaded to the Fortinet Support site. 

Fortinet has released a hotfix for the full FortiClient Windows 7.4.3 client that is available for download through FortiGuard. Please contact Fortinet Customer Support to receive this hotfix. The new version for both is 7.4.3.1.8758.