CVE-2025-8032 is a vulnerability in Firefox and Thunderbird where XSLT document loading did not correctly propagate the source document, allowing the bypass of Content Security Policy (CSP). This issue affects Firefox versions prior to 141 and ESR versions prior to 128.13 and 140.1, as well as corresponding Thunderbird versions. The vulnerability has a high severity with a CVSS score of 8.1. Mozilla has fixed this issue in Firefox 141 and Firefox ESR 128.13. No known exploits are reported in the wild.