CVE-2025-0245

What it actually does

Bypasses an opt-in authentication requirement for the Focus feature under certain circumstances, allowing access without the expected credential check.

Why it matters to the business

Local attackers can reach protected browser functionality without authentication, increasing risk of unauthorized data exposure on affected systems.

How an attack unfolds

An attacker with local system access and user interaction crafts conditions that skip the authentication gate for Focus, directly accessing the feature.

How to fix it

Update Mozilla Firefox to version 134 or later to resolve the bypass.

How to confirm the fix worked

Confirm the Firefox version is 134 or higher and test that the authentication setting for Focus enforces login as expected.

Typical attack path

1. Obtain local access to the target system
2. Trigger user interaction with a crafted input or page
3. Exploit the bypass condition to reach Focus without authentication

How to detect it

Examine browser version logs and Focus access events for instances where protected functionality was reached without an authentication prompt.

What your security team should do

• Upgrade all Firefox instances to version 134 or newer immediately
• Review and enforce authentication settings for Focus across the environment
• Monitor for any post-update reports of authentication bypass attempts