Foxit Workspace: SSRF in file upload and PDF export plus stored XSS in file share preview (CVE-2026-119431, CVE-2026-119433, CVE-2026-119432)

On Nov 6 2026 Foxit updated its hosted Foxit Workspace service (https://ai.foxit.com/) for three Important issues. CVE-2026-119431 and CVE-2026-119433 are server-side request forgery flaws in the file-upload and PDF-export flows: insufficient validation of user-supplied URLs and network parameters could let an authenticated attacker make the service fetch arbitrary internal or external resources and return their contents (CVSS 3.0 7.7). CVE-2026-119432 is a stored cross-site scripting bug in file share preview: an attacker could upload a crafted file, share it, and when a victim opens or previews it the script runs in the application origin and may access locally stored credentials (CVSS 3.0 8.7). Foxit rates all three Important and says no customer action is required; the hosted service is already patched. Reported by mrfathoni.

Why this severity: Foxit Important: stored XSS CVSS 3.0 8.7 (AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N); two SSRFs CVSS 3.0 7.7 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). Hosted Workspace only; vendor already fixed.

Started

Nov 6, 2026

CVEs

CVE-2026-119431CVE-2026-119433CVE-2026-119432

• #Foxit
• #Foxit Workspace
• #SSRF
• #XSS
• #SaaS