Authentication Handler Vulnerability in Private Internet Access Firefox Extension

CVE-2026-120627

What is CVE-2026-120627?

The Private Internet Access Extension for Firefox suffers from an unguarded authentication handler that can inadvertently expose PIA proxy credentials. When users visit a malicious website that prompts a Basic authentication challenge, their credentials may be leaked. This issue was initially addressed in version 3.2.5, but reemerged in later releases, compromising user security and privacy.

References