CVE-2025-23086

Summary

CVE-2025-23086 is a vulnerability affecting Brave Browser versions 1.70.x-1.73.x on most desktop platforms. The issue lies in the browser's implementation of displaying a site's origin on the OS-provided file selector dialog, which can be inaccurately inferred in certain cases. When this occurs, and an open redirector vulnerability exists on a trusted site, a malicious site can manipulate the file select dialog to initiate a download with the trusted site's origin, potentially deceiving users into trusting and downloading potentially harmful files.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.