Overview
The CVE-2025-55031 is a critical vulnerability in Firefox for iOS that allows malicious actors to exploit FIDO links and compromise user accounts. This vulnerability poses a significant risk to users of Firefox for iOS as it provides an attacker with the ability to trick a user into using their passkey to log the attacker’s computer into the target account, potentially leading to system compromise or data leakage.
This vulnerability is particularly concerning due to the widespread use of Firefox on iOS devices and the severity of the potential impact. It underscores the importance of maintaining up-to-date security patches and highlights the potential risks associated with Bluetooth communication.
Vulnerability Summary
CVE ID: CVE-2025-55031
Severity: Critical (CVSS: 9.8)
Attack Vector: Bluetooth
Privileges Required: None
User Interaction: Required
Impact: System compromise and data leakage
Affected Products
Escape the Surveillance Era
Most apps won’t tell you the truth.
They’re part of the problem.
Phone numbers. Emails. Profiles. Logs.
It’s all fuel for surveillance.
Ameeba Chat gives you a way out.
- • No phone number
- • No email
- • No personal info
- • Anonymous aliases
- • End-to-end encrypted
Chat without a trace.
Product | Affected Versions
Firefox for iOS | < 142 Focus for iOS | < 142 How the Exploit Works
This vulnerability involves the use of FIDO links passed via Firefox for iOS to the operating system. A malicious actor, within Bluetooth range, could create a malicious page that uses FIDO links to trick the user into using their passkey for the attacker’s benefit. The attacker could then use this passkey to log into the target account from their computer.
Conceptual Example Code
Since this is a Bluetooth-based exploit, the example cannot be represented in standard HTTP requests or shell commands. However, a conceptual representation of the exploit could look like this:
if victimWithinBluetoothRange {
createMaliciousPageWithFIDOlink;
promptUserToEnterPasskey;
receiveUserPasskey;
usePasskeyToLogin(victimAccount);
}This pseudocode represents the attacker’s actions. They first check whether the victim is within Bluetooth range. If the victim is within range, they create a malicious page with a FIDO link. They then prompt the user to enter their passkey, receive the entered passkey, and use it to log into the victim’s account.