Moderate firefox Logic Error 🔧 Commit mapped

Overview

Moderate
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impactmoderate
DescriptionSame-origin policy bypass in the WebExtensions component
ComponentToolkit
Bug ClassLogic Error
Tracker2057988
Fix commitade6f27ca1b1 (firefox) +5/-0
CISA KEVNot listed
CreditedYaqoub Aldurayhim
Disclosed2026-09-29

Changed Functions

FunctionChangeNotes
recvConduitOpened
toolkit/components/extensions/ConduitsParent.sys.mjs
modified

Files Changed

  • toolkit/components/extensions/ConduitsParent.sys.mjs
diff --git a/toolkit/components/extensions/ConduitsParent.sys.mjs b/toolkit/components/extensions/ConduitsParent.sys.mjs
index 5ab6166c794..42f65507fd5 100644
--- a/toolkit/components/extensions/ConduitsParent.sys.mjs
+++ b/toolkit/components/extensions/ConduitsParent.sys.mjs
@@ -219,6 +219,11 @@ const Hub = {
    * @param {ConduitsParent} actor
    */
   recvConduitOpened(address, actor) {
+    if (this.remotes.has(address.id)) {
+      Cu.reportError(`Duplicate conduit id ${address.id}`);
+      return;
+    }
+
     this.fillInAddress(address, actor);
 
     for (let [key, conduit] of this.reportOnOpened.entries()) {
Loading diff…