CVE-2026-124900 is a critical use-after-free vulnerability in the DOM Service Workers component of Firefox that allows sandbox escape. This flaw was fixed in Firefox version 160. The vulnerability has a high CVSS score of 9.6, indicating it can be exploited remotely without privileges and can lead to complete compromise of confidentiality, integrity, and availability.