The Private Internet Access (PIA) Firefox extension has an authentication vulnerability due to an unguarded onAuthRequired handler. This flaw allows leakage of PIA proxy credentials when a user visits a malicious website that issues a Basic authentication challenge. Although fixed in version 3.2.5, the vulnerability was reintroduced in later versions up to 4.0.5.