High · published September 23, 2026
A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configuration value during high-privilege upgrades. A local attacker could exploit this issue to execute arbitrary commands with root privileges.
| Product | Versions | Fixed in |
|---|---|---|
| foxit/pdf_editor | ≤ 13.2.6.63484 | — |
| foxit/pdf_editor | ≥ 14.0.0.68868, ≤ 14.0.7.69441 | — |
| foxit/pdf_editor | ≥ 2023.1.0.55583, ≤ 2023.3.0.63083 | — |
| foxit/pdf_editor | ≥ 2024.1.0.63682, ≤ 2024.4.1.66479 | — |
| foxit/pdf_editor | ≥ 2025.1.0.66692, ≤ 2025.3.0.69570 | — |
| foxit/pdf_editor | ≥ 2026.1.0.70169, ≤ 2026.2.0.72029 | — |
| foxit/pdf_reader | ≤ 2026.2.0.72029 | — |