Live › vulnerability › CVE-2026-120627
The Private Internet Access extension for Firefox has an unguarded onAuthRequired handler that answers Basic auth challenges from any site. A visited malicious website can therefore obtain the user's PIA proxy credentials.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 18:24 UTC. All times on this page are UTC.
Anyone who uses the Private Internet Access browser extension in Firefox with PIA proxy credentials, whenever they visit a website that issues a Basic auth challenge. Users who do not run the extension in Firefox are not exposed by this description.
No product ranges from the sources yet.
3.2.5 and later affected versions as described in the source3.2.5 fixed the issue but it was reintroduced in later versions; no safe version is namedEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
The Private Internet Access Extension for Firefox contains an unguarded onAuthRequired authentication handler, leading to leakage of PIA proxy credentials when a user visits any malicious website that issues a Basic auth challenge. This issue was fixed in version 3.2.5, but reintroduced in later versions.
This page as .md · .json · in your agent: get_signal("CVE-2026-120627")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.