NetSight
high8.8

CVE-2026-91800

A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configurat…

Impact

A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configuration value during high-privilege upgrades. A local attacker could exploit this issue to execute arbitrary commands with root privileges.

Affected products

VendorProductAffected versions
FoxitPdf Editor
through 13.2.6.63484
from 14.0.0.68868 through 14.0.7.69441
from 2023.1.0.55583 through 2023.3.0.63083
from 2024.1.0.63682 through 2024.4.1.66479
from 2025.1.0.66692 through 2025.3.0.69570
from 2026.1.0.70169 through 2026.2.0.72029
FoxitPdf Reader
through 2026.2.0.72029

Weakness classification

References