CVE-2026-91800
Received Received - Intake

Privilege Escalation in Foxit PDF Editor for macOS

Publication date: 2026-09-23

Last updated on: 2026-09-23

Assigner: Foxit

Description
A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configuration value during high-privilege upgrades. A local attacker could exploit this issue to execute arbitrary commands with root privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-23
Last Modified
2026-09-23
Generated
2026-09-23
AI Q&A
2026-09-23
EPSS Evaluated
N/A
NVD
CVE-2026-91800
EUVD
EUVD-2026-85122

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
foxit pdf_editor *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-732 The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a local privilege escalation vulnerability in Foxit PDF Editor for macOS. It occurs during high-privilege upgrades due to insufficient validation of a user-modifiable configuration value in the installer. An attacker with local access could exploit this to run arbitrary commands with root privileges.

Detection Guidance

This vulnerability is specific to Foxit PDF Editor for macOS and involves local privilege escalation during upgrades. Detection would require checking installed versions of Foxit PDF Editor and verifying if the application has been updated to a patched version. No specific commands are provided in the context to detect this issue.

Impact Analysis

If you use Foxit PDF Editor on macOS, an attacker with local access to your system could exploit this to gain full control over your computer. This could allow them to install malware, steal data, or perform other malicious actions with administrative rights.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements under GDPR and HIPAA. Organizations using Foxit PDF Editor may face legal penalties, data breach notifications, and reputational damage if exploited.

Mitigation Strategies

Immediately update Foxit PDF Editor for macOS to the latest patched version to address the privilege escalation vulnerability. Avoid running the installer with elevated privileges unless absolutely necessary. Monitor for any suspicious activity or unauthorized privilege changes on the system.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-91800. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart