CVE-2026-103417
5.5MediumPublished 13 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
- Impact
- High impact on confidentiality
- Weakness
- CWE-346
Impact
Attackers can steal saved credentials by triggering a cross-origin navigation while the saved-login prompt is open. This requires a user to interact with the autofill interface on a malicious or compromised page.
Root cause
The saved-login autofill mechanism failed to bind credentials to the originating page or abort when the origin changed during navigation.
Affected systems
Firefox for iOS prior to version 157.1.
CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Fix & remediation
Upgrade Firefox for iOS to version 157.1 or later via the App Store. As an interim workaround, avoid using saved login prompts on untrusted websites.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the saved-login UI was open. Autofill was not bound to the originating page or rejected when its origin changed. This vulnerability was fixed in Firefox for iOS 157.1.