PoC Archive PoC Archive

tag

Privacy-Leak

  • None assigned as of 2026-07-03 web HIGH

    Firefox Smart Window Private URL Exfiltration

    Firefox's Smart Window assistant exposes getopentabs and searchbrowsinghistory tools that return private tab/history URLs to the model and mark the conversation as containing privateData, but they never mark it as containing untrustedInput even though the…

    Unverified 2026-07-03