9.1
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description
Missing Authorization vulnerability in Brave Brave brave-popup-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brave: from n/a through <= 0.8.3.
AI Analysis
Missing Authorization vulnerability in Brave Brave brave-popup-builder
Basic Information
ID
CVE-2025-68508
Source
Patchstack
Published
Dec 24, 2025 at 12:31
Modified
Dec 24, 2025 at 19:35
Affected Product
Vendor
Brave
Product
Brave
Version
n/a
Affected Versions
Brave Brave n/a
CWE Classification
AI Assessment
AI Score
9.1 / 10
AI Severity
Critical
Vendor
Brave
Product
Brave Brave brave-popup-builder
Version
<= 0.8.3