CVE-2026-91798 — Foxit PDF Editor/Reader Updater Privilege Escalation

CVE-2026-91798

Foxit PDF Editor/Reader Updater Privilege Escalation PUBLISHED

Description (CNA)

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execution with higher privileges.

Affected (CNA)

Vendor / product	Versions
Foxit Software Inc. / Foxit PDF Editor	affected Versions 2026.2 and earlier; affected Versions 14.0.7 and earlier; affected Versions 13.2.6 and earlier
Foxit Software Inc. / Foxit PDF Reader	affected Versions 2026.2 and earlier

CWE

CWE-732

References

https://www.foxit.com/support/security-bulletins.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.