CVE-2026-91797: CWE-73 External control of file name or path in Foxit Software Inc. Foxit PDF Editor
Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be written to directories outside the expected secure area when the PDF is opened.
AI Analysis
Technical Summary
Foxit PDF Editor/Reader does not validate directory traversal sequences in attachment file names. This flaw allows an attacker to craft a PDF with malicious attachments that, when opened, can write files to arbitrary directories outside the expected secure area. The vulnerability is identified as CWE-73 (External Control of File Name or Path) and carries a CVSS 3.1 score of 7.8, indicating high severity with potential for high confidentiality, integrity, and availability impact.
Potential Impact
Successful exploitation can result in arbitrary files being written to locations outside the intended directory, potentially leading to system compromise, data corruption, or denial of service. The vulnerability affects confidentiality, integrity, and availability of the system where the PDF Editor/Reader is used.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening PDFs from untrusted sources and consider restricting file system permissions to limit the impact of potential exploitation.
CVE-2026-91797: CWE-73 External control of file name or path in Foxit Software Inc. Foxit PDF Editor
Description
Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be written to directories outside the expected secure area when the PDF is opened.
CVSS v3.1
Score 7.8high
Affected software
Foxit Software Inc.
Foxit PDF Editor
Foxit Software Inc.
Foxit PDF Reader
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Foxit PDF Editor/Reader does not validate directory traversal sequences in attachment file names. This flaw allows an attacker to craft a PDF with malicious attachments that, when opened, can write files to arbitrary directories outside the expected secure area. The vulnerability is identified as CWE-73 (External Control of File Name or Path) and carries a CVSS 3.1 score of 7.8, indicating high severity with potential for high confidentiality, integrity, and availability impact.
Potential Impact
Successful exploitation can result in arbitrary files being written to locations outside the intended directory, potentially leading to system compromise, data corruption, or denial of service. The vulnerability affects confidentiality, integrity, and availability of the system where the PDF Editor/Reader is used.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening PDFs from untrusted sources and consider restricting file system permissions to limit the impact of potential exploitation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Foxit
- Date Reserved
- 2026-09-15T07:34:40.287Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ab387c8f7a7c541067c1667
Added to database: 09/23/2026, 08:03:20 UTC
Last enriched: 09/23/2026, 08:19:42 UTC
Last updated: 09/24/2026, 01:57:04 UTC
Views: 9
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.