CVE-2025-13017 is a same-origin policy bypass vulnerability in the DOM Notifications component affecting Firefox versions prior to 145 and Firefox ESR versions prior to 140.5. This vulnerability allows a moderate impact bypass of the same-origin policy, which is a critical security control in web browsers. The issue was fixed in Firefox 145 and Firefox ESR 140.5.