CVE-2026-91800: Foxit PDF Editor installer local privilege escalation
Published Sep 23, 2026
·Updated
A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configuration value during high-privilege upgrades. A local attacker could exploit this issue to execute arbitrary commands with root privileges.
Affected Software
1 affected component
Foxit PDF Editor
Event History
Sep 23, 2026
CVE Published
via MITRE·07:50 AM
Data Sourced
via MITRE·07:50 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attacker needs local access with low privileges and must be able to modify the relevant configuration value before or during a high-privilege upgrade.
2
When is the vulnerable code path reached?
The issue is associated with high-privilege upgrades performed by the installer. It stems from insufficient validation of a configuration value that a user can modify.
3
What is the impact of successful exploitation?
A successful attacker can execute arbitrary commands with root privileges, affecting confidentiality, integrity, and availability.