CVE-2025-6431 The prompt in Firefox for Android that asks before opening a link in an external application could be bypassed
Attackers can bypass the confirmation prompt when opening links in external apps on Firefox for Android, potentially exposing users to risks in those applications.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2025-6431?
CVE-2025-6431 is a medium-severity vulnerability in Mozilla Firefox, published on 24 Jun 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
When a link can be opened in an external application, Firefox for Android will, by default, prompt the user before doing so. An attacker could have bypassed this prompt, potentially exposing the user to security vulnerabilities or privacy leaks in external applications. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.*. This vulnerability was fixed in Firefox 140.
Weakness: CWE-285
Which versions are affected by CVE-2025-6431?
It affects 1 product.
Products include Mozilla Firefox.
How do I fix CVE-2025-6431?
Upgrade to a fixed version.
Is CVE-2025-6431 being exploited?
There is no known exploitation of CVE-2025-6431 in the wild and no public exploit code.
Other vulnerabilities in Mozilla Firefox
Sources
Also known as GHSA-jh8f-wj26-59hv, UBUNTU-CVE-2025-6431.