CVE-2026-91800

Analyzed Analyzed - Analysis Complete

Privilege Escalation in Foxit PDF Editor for macOS

Publication date: 2026-09-23

Last updated on: 2026-10-15

Assigner: Foxit

Description

A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configuration value during high-privilege upgrades. A local attacker could exploit this issue to execute arbitrary commands with root privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-23

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-09-23

EPSS Evaluated

2026-10-18

NVD

CVE-2026-91800

EUVD

EUVD-2026-85122

Affected Vendors & Products

Vendor	Product	Version / Range
foxit	pdf_editor	From 2023.1.0.55583 (inc) to 2023.3.0.63083 (inc)
foxit	pdf_editor	From 2024.1.0.63682 (inc) to 2024.4.1.66479 (inc)
foxit	pdf_editor	From 2025.1.0.66692 (inc) to 2025.3.0.69570 (inc)
foxit	pdf_editor	From 14.0.0.68868 (inc) to 14.0.7.69441 (inc)
foxit	pdf_editor	From 2026.1.0.70169 (inc) to 2026.2.0.72029 (inc)
foxit	pdf_editor	to 13.2.6.63484 (inc)
foxit	pdf_reader	to 2026.2.0.72029 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-732	The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Attack-Flow Graph

Executive Summary

This is a local privilege escalation vulnerability in Foxit PDF Editor for macOS. It occurs during high-privilege upgrades due to insufficient validation of a user-modifiable configuration value in the installer. An attacker with local access could exploit this to run arbitrary commands with root privileges.

Detection Guidance

This vulnerability is specific to Foxit PDF Editor for macOS and involves local privilege escalation during upgrades. Detection would require checking installed versions of Foxit PDF Editor and verifying if the application has been updated to a patched version. No specific commands are provided in the context to detect this issue.

Impact Analysis

If you use Foxit PDF Editor on macOS, an attacker with local access to your system could exploit this to gain full control over your computer. This could allow them to install malware, steal data, or perform other malicious actions with administrative rights.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements under GDPR and HIPAA. Organizations using Foxit PDF Editor may face legal penalties, data breach notifications, and reputational damage if exploited.

Mitigation Strategies

Immediately update Foxit PDF Editor for macOS to the latest patched version to address the privilege escalation vulnerability. Avoid running the installer with elevated privileges unless absolutely necessary. Monitor for any suspicious activity or unauthorized privilege changes on the system.

Hi! I’m here to help you understand CVE-2026-91800. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70