CVE-2026-91797: Foxit PDF Editor/Reader Portfolio Directory Traversal Remote Code Execution Vulnerability
Published Sep 23, 2026
·Updated
Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be written to directories outside the expected secure area when the PDF is opened.
Affected Software
9 affected components
Foxit PDF Editor/Reader
All of the following
Any of the following
Foxit PDF Editor<=13.2.5.63482
Foxit PDF Editor>=14.0.0.33046<=14.0.7.33751
Foxit PDF Editor>=2023.1.0.15510<=2023.3.0.23028
Foxit PDF Editor>=2024.1.0.23997<=2024.4.1.27687
Foxit PDF Editor>=2025.1.0.27937<=2025.3.0.35737
Foxit PDF Editor>=2026.1.0.36452<=2026.2.0.39747
Foxit PDF Reader<=2026.2.0.39747
Microsoft Windows
Event History
Sep 23, 2026
CVE Published
via MITRE·07:50 AM
Data Sourced
via MITRE·07:50 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:17 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attacker needs to persuade a user to open a PDF containing a malicious attachment. The CVSS vector indicates no attacker privileges are required, but user interaction is required.
2
What is the potential impact after exploitation?
A malicious attachment can be written outside the expected secure directory, and the issue is rated high severity with high confidentiality, integrity, and availability impact.