
Federal agencies are urgently removing Chinese-founded Foxit PDF software from their systems, exposing a major national security vulnerability.
Story Snapshot
- Multiple federal agencies, including the State Department and Missile Defense Agency, have terminated contracts with Foxit over security concerns.
- Foxit’s Chinese origins and ties prompted scrutiny and a rapid shift away from its software in sensitive government environments.
- Recent vulnerabilities and legislative actions accelerated agency decisions to purge Foxit products from federal IT infrastructure.
- The move signals broader U.S. decoupling from Chinese technology in government operations.
Federal Agencies Respond to Security Threats from Foxit Software
In early 2025, major U.S. federal agencies, including the State Department and Missile Defense Agency, began terminating contracts with Foxit, a PDF software company founded in China. These agencies removed Foxit products from their systems after investigations raised alarm about the company’s Chinese origins and potential security risks. Foxit, previously listed as a vendor for numerous government clients, quickly erased references to U.S. agencies from its website amid media scrutiny. The rapid, coordinated response highlights the seriousness of supply chain vulnerabilities in critical government IT infrastructure.
US agencies distance themselves from Chinese-founded PDF software https://t.co/qeyyAbOaRV
— Fox News Politics (@foxnewspolitics) August 28, 2025
Legislative Actions and Historical Precedents Shape Agency Decisions
Foxit’s removal from federal systems follows a pattern set by previous bans on Chinese and Russian technology firms. The National Defense Authorization Act, specifically Section 889 and Section 1260H, restricts government contracts with vendors deemed security risks due to foreign control. Foxit, founded in Fuzhou, China in 2001 and publicly traded on the Shanghai stock exchange, became a significant competitor to Adobe in the U.S. market. Its deep penetration into defense and civilian agencies raised concerns as policymakers prioritized cybersecurity and supply chain integrity. The context mirrors prior removals of Huawei, ZTE, and Kaspersky, emphasizing the government’s commitment to protecting sensitive data.
First on Fox: Federal agencies—including State, MDA, DOJ, and DHS—have pulled the plug on Foxit, a PDF software firm founded in China
After Fox News Digital began probing its government ties, the company quietly scrubbed federal clients from its websitehttps://t.co/yy41mlQxxS
— Morgan Phillips (@_phillipsmorgan) August 28, 2025
Stakeholders and Power Dynamics in the Federal Purge
At the center of this story are Foxit Software, its founder Eugene Xiong, and a range of federal agencies responsible for national security and public safety. Policymakers in Congress and the White House set the regulatory framework that compelled agencies to sever ties with Foxit. Agency CIOs and procurement officers executed the removal, balancing workflow disruption with mandates for secure technology. Foxit, despite its U.S. subsidiary in California, remains under the control of its Chinese parent company, fueling apprehension about data exposure and espionage. These dynamics underscore the tension between open market competition and the imperative for secure, domestically controlled software solutions.
Security Vulnerabilities and Technical Risks Accelerate Action
Technical disclosures in 2025 revealed vulnerabilities in Foxit products, such as CVE-2025-32451, intensifying fears of data breaches within federal systems. Security experts warned that software from companies linked to adversarial governments posed unacceptable risks, including the potential for data exfiltration. While Foxit issued security bulletins and patched known issues, agencies remained unconvinced, opting for immediate contract terminations. The lack of public comment from Foxit and limited agency statements reflect the sensitive nature of the risk. The episode has prompted agencies to vet all software vendors with renewed rigor, favoring U.S.-based options for future procurement.
Broader Impact and Future Implications for U.S. Technology Policy
The removal of Foxit software from federal agencies marks a significant escalation in the U.S. government’s decoupling from Chinese technology. Short-term impacts include disruption as agencies replace Foxit with alternative solutions, likely boosting domestic providers like Adobe. Long-term, the precedent set by these terminations will drive heightened compliance requirements for all software vendors seeking government contracts.
The move reinforces political momentum for restricting foreign technology and may deter other international vendors from pursuing U.S. government business. While the immediate social effects are limited, public trust in government IT security stands to benefit from more stringent supply chain controls.
Sources:
US agencies distance themselves from Chinese-founded PDF software | Fox News
Tracking Terminated Contracts
Defense Contractors: Restrictions When Contracting with Chinese Companies
CVE-2025-32451: Foxit Reader Memory Corruption
Foxit Security Bulletins

















