Description
A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configuration value during high-privilege upgrades. A local attacker could exploit this issue to execute arbitrary commands with root privileges.
Published: 2026-09-23
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: High‑risk local privilege escalation
Action: Patch Immediately
AI Analysis

Impact

The vulnerability arises from insufficient validation of a user‑modifiable configuration value during high‑privilege upgrades of the Foxit PDF Editor installer on macOS. This flaw allows a local attacker to execute arbitrary commands with root privileges, granting complete system control. The weakness is classified as CWE‑732, indicating inadequate permissions for configuration data.

Affected Systems

Foxit Software Inc. distributes Foxit PDF Editor for macOS. The installer used during high‑privilege upgrades is affected. Version details are not disclosed in the CVE entry, so all macOS installations that rely on the installer for privileged upgrades are potentially vulnerable.

Risk and Exploitability

The CVSS score of 8.8 reflects a high severity for privilege escalation. The EPSS score of less than 1% suggests exploitation is currently rare and the vulnerability is not listed in CISA's KEV catalog. Nevertheless, because the flaw is local, any user who can run the installer may gain root and perform malicious actions such as installing persistence mechanisms or exfiltrating data.

Generated by OpenCVE AI on September 23, 2026 at 14:49 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest Foxit PDF Editor update that includes the installer fix.
  • If an update is not immediately available, delete the existing installer and reinstall the package downloaded from the official Foxit website, verifying its integrity against the vendor’s provided checksum.
  • Restrict users from running unsigned installers that require elevated privileges by configuring macOS Gatekeeper to block applications that are not signed or sandboxed.

Generated by OpenCVE AI on September 23, 2026 at 14:49 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 23 Sep 2026 16:15:00 +0000

Type Values Removed Values Added
First Time appeared Foxitsoftware
Foxitsoftware foxit Pdf Editor
Vendors & Products Foxitsoftware
Foxitsoftware foxit Pdf Editor

Wed, 23 Sep 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 23 Sep 2026 11:45:00 +0000

Type Values Removed Values Added
Description A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configuration value during high-privilege upgrades. A local attacker could exploit this issue to execute arbitrary commands with root privileges.
Title Foxit PDF Editor installer local privilege escalation
Weaknesses CWE-732
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}

Subscriptions

Foxitsoftware Foxit Pdf Editor
cve-icon MITRE

Status: PUBLISHED

Assigner: Foxit

Published:

Updated: 2026-09-23T14:45:34.308Z

Reserved: 2026-09-15T07:34:43.392Z

Link: CVE-2026-91800

cve-icon Vulnrichment

Updated: 2026-09-23T14:45:30.643Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-23T08:17:12.023

Modified: 2026-09-23T17:58:26.570

Link: CVE-2026-91800

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-23T16:00:07Z

Weaknesses
  • CWE-732

    Incorrect Permission Assignment for Critical Resource