CVE-2026-124931 is a same-origin policy bypass vulnerability in the DOM Core and HTML components of Firefox. This security flaw was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability could allow an attacker to bypass browser security restrictions that normally isolate content from different origins.