CVE-2026-55587 AliasVault: Browser extension WebAuthn bridge accepts forged origin/RP ID

AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.29.4, the AliasVault browser extension passkey provider does not bind passkey requests to the actual webpage origin or verify that the requested relying-party identifier matches the current website. A maliciou...

CVE-2026-55587

The AliasVault browser extension, prior to version 0.29.4 , contains a WebAuthn bridge vulnerability where it fails to bind passkey requests to the actual webpage origin or verify that the requested relying-party identifier matches the current website. A malicious website can provide forged origi...

CVE-2026-55587 AliasVault: Browser extension WebAuthn bridge accepts forged origin/RP ID

AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.29.4, the AliasVault browser extension passkey provider does not bind passkey requests to the actual webpage origin or verify that the requested relying-party identifier matches the current website. A maliciou...

PT-2026-39163

Summary webauthn-rs-core Relying Partyrp and webauthn-authenticator-rs client checked that an Origin in CollectedClientDataorigin is valid for an RP IDrpid with str::ends withends-with, without checking for a dot . before the RP ID when allowing subdomainsregisterable-suffix. This check is flawed...