The vulnerability CVE-2025-4084 arises from improper escaping of special characters in Firefox's "copy as cURL" command on Windows. An attacker could exploit this by convincing a user to run a maliciously crafted cURL command copied from the browser, resulting in local code execution. The flaw is limited to Firefox on Windows and has been addressed in Firefox ESR 128.10 and 115.23. The CVSS 3.1 base score is 5.7 (medium severity), reflecting network attack vector, low attack complexity, required privileges, and user interaction, with high confidentiality impact but no integrity or availability impact.

Successful exploitation could lead to local code execution on the affected Windows system, potentially allowing an attacker to run arbitrary code with the privileges of the user executing the command. The confidentiality of the system could be compromised, but there is no direct impact on integrity or availability. The vulnerability is limited to Firefox on Windows and does not affect other platforms.

This vulnerability has been fixed in Firefox ESR 128.10 and Firefox ESR 115.23. Users and administrators should update to these or later versions to remediate the issue. No additional mitigation steps are required as the fix is officially provided by Mozilla.