CVE-2026-119432 · Other
NO FIX YET · SEE WHAT TO DO
Foxit Workspace has a stored cross-site scripting flaw in its file share preview. A crafted file shared with a user runs embedded script in the app's origin when the user opens or previews it, which can expose locally stored credentials.
first public Nov 6, 2026 · 2 sources
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Users of the hosted Foxit Workspace (ai.foxit.com) who open or preview files shared by others were exposed: a crafted shared file could run script in the app's origin and reach locally stored credentials. Foxit says the service has been updated and no customer action is needed. Teams that do not use Foxit Workspace, or do not open shared files in it, can skip this.
Who cares foxit-workspace, saas, stored-xss, xss
A stored cross-site scripting (XSS) vulnerability exists in the Foxit Workspace's file share preview functionality. An attacker could upload a crafted file and share it with a victim. When the victim opens or previews the file, the embedded script executes in the application's origin, potentially accessing locally stored credentials and enabling credential theft.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.