CVE-2025-1935 is a low-severity vulnerability in Firefox versions prior to 136 and Firefox ESR prior to 128.8. It allows a web page to trick a user into setting that site as the default handler for a custom URL protocol via clickjacking the registerProtocolHandler info-bar. This could lead to unintended protocol handling by the malicious site.