Cloudflare's PACT protocol is a new initiative developed in collaboration with leading browsers to provide a privacy-preserving method for websites to verify human visitors. It works by allowing trusted sites to issue anonymous tokens confirming 'personhood,' which other sites can then use to authenticate users as human without requiring further challenges such as CAPTCHAs. This mechanism resembles a public key infrastructure model but applied to human verification. The announcement does not describe any security vulnerability, exploit, or threat but rather a new technology aimed at improving bot detection and user privacy.

No direct security impact or vulnerability is reported. The initiative could reduce the use of invasive tracking and CAPTCHA challenges, potentially improving privacy and user experience. There is no indication of exploitation or security risk from the information provided.

No mitigation or patch is applicable as this is an announcement of a new protocol rather than a vulnerability or exploit. Organizations should monitor the development and deployment of PACT for any future security advisories or implementation guidance.