CVE-2026-16401 is a high-severity privilege escalation vulnerability in the Data Loss Prevention component of Firefox and Thunderbird. This issue allows an attacker to gain elevated privileges within the affected applications. The vulnerability was fixed in Firefox 153 and Thunderbird 153.