CVE-2025-69235

CVE-2025-69235

Weakness CWE-346 · Origin validation

Published December 30, 2025

Last update December 31, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar environment.

Key dates

02Disclosure timeline

December 30, 2025 CVE published

December 31, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-69235 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/346.html

Related vulnerabilities

04Related CVE

CVE-2024-32642 Host header poisoning allows account takeover via password reset email CVE-2026-42559 RMCP: DNS rebinding vulnerability in rmcp Streamable HTTP server transport CVE-2026-41393 OpenClaw < 2026.3.31 - Arbitrary DNS Authority Acceptance and Credential Exfiltration via Wide-Area Discovery CVE-2025-43929 CVE-2025-34291 Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE