CVE-2026-12057: DoS + Remote Code Execution via PDF JavaScript in Foxit AI

Synopsis

This is a sandbox escape and remote code execution vulnerability in Foxit AI's PDF JavaScript engine. An attacker embeds malicious JavaScript in a crafted PDF file; when a local user opens the file, the sandbox fails to block access to dangerous interfaces, allowing remote script loading and arbitrary code execution with effects that extend beyond the sandbox boundary. Exploitation achieves full confidentiality, integrity, and availability impact on the host. HarborGuard is tracking this advisory and will make a patched-image rebuild available the moment Foxit publishes a fix version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker needs an existing shell or process on the host is not required here; instead, the attack vector is local (AV:L), meaning the malicious PDF is delivered to and opened by a local user rather than reaching the service over the network.

• AuthenticationNot required

  No authentication or account privileges are required (PR:N); any user who opens the crafted PDF triggers the vulnerable code path.

• Victim interactionRequired

  The victim must open the attacker-supplied PDF file, making this a social-engineering vector that requires the target to take an explicit action (UI:R).

• Attack complexityDetail

  Attack complexity is low (AC:L), meaning the exploit is reliable and condition-free once the victim opens the file, with no race conditions or special environmental factors required.

Blast Radius

• The attacker executes arbitrary code in the context of the application process, gaining the ability to run any command the process is permitted to run.
• The sandbox boundary is broken (S:C), so impact extends beyond Foxit AI itself to other processes and data accessible to the user account on the host.
• All files, credentials, and session material readable by the running process are exposed to the attacker (C:H).
• The attacker can write or delete files and modify application state on the host (I:H), and can crash or render unavailable the affected service and dependent processes (A:H).