CVE-2025-6429 is a vulnerability in Firefox versions prior to 140 and Firefox ESR prior to 128.12 where the browser could incorrectly parse a URL in an embed tag and rewrite it to the youtube.com domain. This flaw could allow attackers to bypass website security checks that restrict which domains are allowed to be embedded.