{"id":"CVE-2026-91800","published":"2026-09-23T08:17:12.023","lastModified":"2026-09-23T17:58:26.570","description":"A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configuration value during high-privilege upgrades. A local attacker could exploit this issue to execute arbitrary commands with root privileges.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-732"],"vendors":[],"products":[],"references":[{"url":"https://www.foxit.com/support/security-bulletins.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A local privilege escalation vulnerability in Foxit PDF Editor for macOS allows a local attacker to execute arbitrary commands with root privileges by exploiting insufficient validation of a user-modifiable configuration value during high-privilege upgrades.","exploitability":"Exploitation requires local access and knowledge of the upgrade process, making it moderately difficult.","blast_radius":"If exploited, the attacker could gain full control over the affected system, leading to potential data loss, system compromise, and further attacks.","remediation":"Upgrade to the latest version of Foxit PDF Editor for macOS as soon as possible.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","privilege-escalation","macos","pdf"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-28T08:56:47.783Z"}}