{"id":"CVE-2026-91798","published":"2026-09-23T08:17:11.793","lastModified":"2026-09-23T17:58:26.570","description":"A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execution with higher privileges.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-732"],"vendors":[],"products":[],"references":[{"url":"https://www.foxit.com/support/security-bulletins.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw allows regular users to modify the configuration file of Foxit PDF Editor/Reader, leading to potential arbitrary script execution with elevated privileges.","exploitability":"Exploitation is relatively straightforward given the insecure permission configuration, requiring only local access and modification of the configuration file.","blast_radius":"If exploited, this vulnerability could result in full system compromise, as arbitrary scripts could be executed with higher privileges.","remediation":"Upgrade to the latest version of Foxit PDF Editor/Reader, as no specific version is mentioned in the description.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","privilege-escalation","config-bug"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-28T08:56:42.106Z"}}