High · published December 17, 2025
⚡ A sneaky little trick lets attacker-controlled scripts swipe your stored credentials through your browser! Think of it like a waiter who knows your order but works at a restaurant with a hidden menu. You think you're just placing an order, but the waiter can intercept your requests and send them to a competitor instead — that's the danger here! An attacker could quietly harvest your credentials as you autofill them, leaving you vulnerable to account takeovers or exposing sensitive data. It's like hand-delivering your secrets to a thief without even realizing it!
Think of it like a waiter who knows your order but works at a restaurant with a hidden menu. You think you're just placing an order, but the waiter can intercept your requests and send them to a competitor instead — that's the danger here! This vulnerability in KeePassXC-Browser (up to version 1.9.9.2) allows scripts in sandboxed iframes to access autofilled form fields, compromising user credentials through malicious sites adhering to Content Security Policies.
An attacker could quietly harvest your credentials as you autofill them, leaving you vulnerable to account takeovers or exposing sensitive data. It's like hand-delivering your secrets to a thief without even realizing it! Update KeePassXC-Browser to the latest version immediately to close this vulnerability. Additionally, consider reviewing your browser security settings to limit scripts running in sandboxed documents until a patch is confirmed. You've got this! Stay vigilant and keep your data safe! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| keepassxc/keepassxc-browser | ≤ 1.9.9.2 | — |