CVE-2025-55031

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-55031", "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "state": "PUBLISHED", "assignerShortName": "mozilla", "dateReserved": "2025-08-05T13:26:34.686Z", "datePublished": "2025-08-19T20:52:49.748Z", "dateUpdated": "2026-04-13T14:29:00.921Z"}, "containers": {"cna": {"affected": [{"product": "Firefox for iOS", "vendor": "Mozilla", "versions": [{"status": "unaffected", "version": "142", "lessThanOrEqual": "*", "versionType": "rpm"}]}, {"product": "Focus for iOS", "vendor": "Mozilla", "versions": [{"status": "unaffected", "version": "142", "lessThanOrEqual": "*", "versionType": "rpm"}]}], "descriptions": [{"lang": "en", "value": "Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport. An attacker within Bluetooth range could have used this to trick the user into using their passkey to log the attacker's computer into the target account. This vulnerability was fixed in Firefox for iOS 142 and Focus for iOS 142.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport. An attacker within Bluetooth range could have used this to trick the user into using their passkey to log the attacker's computer into the target account. This vulnerability was fixed in Firefox for iOS 142 and Focus for iOS 142."}]}], "title": "Passkey phishing within Bluetooth range", "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1979499"}, {"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1979804"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-68/"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-69/"}], "credits": [{"lang": "en", "value": "Hafiizh"}], "providerMetadata": {"orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "shortName": "mozilla", "dateUpdated": "2026-04-13T14:29:00.921Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-601", "lang": "en", "description": "CWE-601 URL Redirection to Untrusted Site ('Open Redirect')"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-08-20T14:01:38.460614Z", "id": "CVE-2025-55031", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-08-20T15:17:12.739Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-55031", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-08-20T14:01:38.460614Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-601", "description": "CWE-601 URL Redirection to Untrusted Site ('Open Redirect')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-08-20T14:01:42.748Z"}}], "cna": {"title": "Passkey phishing within Bluetooth range", "credits": [{"lang": "en", "value": "Hafiizh"}], "affected": [{"vendor": "Mozilla", "product": "Firefox for iOS", "versions": [{"status": "unaffected", "version": "142", "versionType": "rpm", "lessThanOrEqual": "*"}]}, {"vendor": "Mozilla", "product": "Focus for iOS", "versions": [{"status": "unaffected", "version": "142", "versionType": "rpm", "lessThanOrEqual": "*"}]}], "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1979499"}, {"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1979804"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-68/"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-69/"}], "descriptions": [{"lang": "en", "value": "Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport. An attacker within Bluetooth range could have used this to trick the user into using their passkey to log the attacker's computer into the target account. This vulnerability was fixed in Firefox for iOS 142 and Focus for iOS 142.", "supportingMedia": [{"type": "text/html", "value": "Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport. An attacker within Bluetooth range could have used this to trick the user into using their passkey to log the attacker's computer into the target account. This vulnerability was fixed in Firefox for iOS 142 and Focus for iOS 142.", "base64": false}]}], "providerMetadata": {"orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "shortName": "mozilla", "dateUpdated": "2026-04-13T14:29:00.921Z"}}}, "cveMetadata": {"cveId": "CVE-2025-55031", "state": "PUBLISHED", "dateUpdated": "2026-04-13T14:29:00.921Z", "dateReserved": "2025-08-05T13:26:34.686Z", "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "datePublished": "2025-08-19T20:52:49.748Z", "assignerShortName": "mozilla"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Firefox for iOS", "vendor": "Mozilla", "versions": [{"lessThanOrEqual": "*", "status": "unaffected", "version": "142", "versionType": "rpm"}]}, {"product": "Focus for iOS", "vendor": "Mozilla", "versions": [{"lessThanOrEqual": "*", "status": "unaffected", "version": "142", "versionType": "rpm"}]}], "source": "security@mozilla.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "7EE372C2-99CB-45F5-9F6B-0862D02C6374", "versionEndExcluding": "142.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:firefox_focus:*:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "667BB2C7-17E5-4D04-AA9A-1CBE726492AF", "versionEndExcluding": "142.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport. An attacker within Bluetooth range could have used this to trick the user into using their passkey to log the attacker's computer into the target account. This vulnerability was fixed in Firefox for iOS 142 and Focus for iOS 142."}, {"lang": "es", "value": "Las p\u00e1ginas maliciosas podr\u00edan usar Firefox para iOS para transferir enlaces FIDO al sistema operativo y activar el transporte de claves de acceso h\u00edbridas. Un atacante dentro del alcance de Bluetooth podr\u00eda haber usado esto para enga\u00f1ar al usuario y que usara su clave de acceso para iniciar sesi\u00f3n en la cuenta objetivo. Esta vulnerabilidad afecta a Firefox para iOS (versi\u00f3n anterior a la 142) y Focus (versi\u00f3n anterior a la 142)."}], "id": "CVE-2025-55031", "lastModified": "2026-09-30T18:10:00.190", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-55031", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-08-20T14:01:38.460614Z", "version": "2.0.3"}}]}, "published": "2025-08-19T21:15:28.340", "references": [{"source": "security@mozilla.org", "tags": ["Issue Tracking", "Permissions Required"], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1979499"}, {"source": "security@mozilla.org", "tags": ["Issue Tracking", "Permissions Required"], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1979804"}, {"source": "security@mozilla.org", "tags": ["Vendor Advisory"], "url": "https://www.mozilla.org/security/advisories/mfsa2025-68/"}, {"source": "security@mozilla.org", "tags": ["Vendor Advisory"], "url": "https://www.mozilla.org/security/advisories/mfsa2025-69/"}], "sourceIdentifier": "security@mozilla.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-601"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-20T16:45:47.587949+00:00", "value": {"mitigation_remediation": ["Upgrade Firefox for iOS and Focus for iOS to version 142 or later to apply the vendor\u2019s patch", "Disable Bluetooth on the device when not needed to eliminate the proximity requirement for the attack", "Instruct users to be cautious of passkey requests from unknown or unexpected origins and to confirm the legitimacy of such prompts before accepting"], "summary": {"action": "Patch Now", "impact": "Unauthorized account access through passkey phishing"}, "threat_synthesis": {"affected_systems": "Mozilla\u2019s browsers on iOS (Firefox and Focus) are affected. The problem exists in all releases prior to version 142 of each product. Versions 142 and later contain a patch that disables the vulnerable handling of FIDO: URIs.", "description_and_impact": "A malicious website can take advantage of Firefox for iOS\u2019s handling of FIDO: links to trigger a hybrid passkey transport to the underlying operating system. When the user accepts the passkey request, the attacker's computer can be logged into the user's account by reusing the supplied passkey. The weakness leading to this exploitation is identified as CWE\u2011601, indicating an open redirect or link redirection flaw that allows unintended navigation. The consequence is loss of account confidentiality and integrity, as an attacker can gain authenticated access to the victim\u2019s services using the passkey.", "risk_and_exploitability": "The CVSS score of 9.8 reflects a high severity of the flaw. The EPSS score indicates that the likelihood of exploitation in the wild is currently very low (<1%). Nevertheless, the vulnerability is not listed in the CISA KEV catalog, meaning no public exploit has been confirmed yet. The likely attack vector is a nearby attacker within Bluetooth range who lures a user into visiting a malicious site that then triggers the passkey prompt. No additional prerequisites beyond proximity and user interaction are required."}}}}, "created": "2025-08-21T12:31:42.981848+00:00", "updated": "2026-04-20T17:00:12.707942+00:00", "vendors": ["apple", "apple$PRODUCT$ios", "mozilla", "mozilla$PRODUCT$firefox_for_ios", "mozilla$PRODUCT$focus_for_ios"]}