CVE-2025-1941 concerns a security flaw in Firefox Focus for Android that allowed bypassing a user opt-in setting designed to require authentication before use. This vulnerability could potentially allow unauthorized access despite the authentication requirement. The issue was addressed and fixed in Firefox version 136. The CVSS 3.1 base score is 9.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N), indicating network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality and integrity. The vendor advisory from Mozilla (MFSA 2025-14) lists this fix among other security updates in Firefox 136.

The vulnerability could allow an attacker to bypass the authentication requirement on Firefox Focus for Android, potentially leading to unauthorized access to the application or data protected by this setting. The CVSS score of 9.1 reflects critical impact on confidentiality and integrity, with no required privileges or user interaction. However, there are no known exploits in the wild at this time.

This vulnerability is fixed in Firefox 136. Users and administrators should update Firefox Focus for Android to version 136 or later to remediate this issue. Since the vendor advisory confirms the fix, no additional mitigation steps are required beyond applying the official update.