CVE-2026-91801

A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validation of resource file paths may allow files to be written outside their intended locations, potentially enabling arbitrary code execution.

Score

CVSS 3.1 7.8 High

Status

Analyzed - 14984358-7092-470d-8f34-ade47a7658a2

Published

2026-09-23

Last modified

2026-10-08

Weaknesses

CWE-22

Affected products

• Pdf Editor (Foxit)
• Pdf Reader (Foxit)
• Foxit Pdf Editor (Foxit Software Inc.)
• Foxit Pdf Reader (Foxit Software Inc.)

References

• https://www.foxit.com/support/security-bulletins.html