CVE-2026-91813

Summary

A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows local attackers to replace an update package, leading to potential execution of arbitrary code with elevated privileges.

Exploitability

Exploitation requires local access and the ability to replace the update package between download and extraction. Precondition is the presence of a local attacker with sufficient privileges.

Blast radius

If exploited, this could result in unauthorized code execution with elevated privileges, potentially leading to full system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the automatic update feature or ensure that all update packages are validated and verified before extraction.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.