Skip to content
Submit incident
AII-1001-87279
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.

CVE-2025-3035: Tab title disclosure in Firefox AI chatbot

A vulnerability in Firefox's AI chatbot feature could leak the document title from one tab into another tab's chat prompt. The flaw was discovered and fixed in Firefox 137, released April 1, 2025.

1 April 2025 · Mozilla · Privacy and surveillance
1 April 2025

Drafted by Raidu Incident Detection, an automated system.

AII-1001-872792 sources ↓
Quick facts
Category
Privacy and surveillance
Country
United States
Source
bugzilla.mozilla.org
Date
1 April 2025
Drafted by
Raidu Incident Detection

What happened

By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt.

Reported impact

The vulnerability had a moderate impact rating and could expose sensitive information from previously accessed web pages through the chatbot interface.

Governance controls

Mozilla fixed the vulnerability in Firefox 137, released on April 1, 2025. The flaw was reported by Matthew Noorenberghe and tracked as bug 1952268.

Classification

Category
Privacy and surveillance
Industry
Media, social platforms and marketing
Country
United States
Harm status
Potential harm
Intent
Unintentional
Timing
Post-deployment
Harmed
Consumers
Failure modes
Data leak
AI systems
Firefox AI chatbot

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=1952268
mozilla.org
https://www.mozilla.org/security/advisories/mfsa2025-20/