A malicious website could turn Fortinet’s privileged-access browser extension into the path to attacker-controlled proxy infrastructure. Fixing it requires both server and extension updates.