🎯 New Report #3693295: iOS Brave Playlist "Open in Private Tab" bypasses FaceID requirement for Private Tabs
🔺Severity: Medium
👽 Reporter: aaront
⭐️ Reputation: 142
🛠 State: resolved
💼 Team: Brave Software
💵 Bounty: null
🕐 Submitted: 2026-04-24
⏰ Disclosed: 2026-05-28 15:40:39
📝 Summary: A vulnerability was discovered in the Brave browser for iOS where adding or opening a song in the Brave playlist and holding for the "Open in new Private Tab" option bypassed the Face ID or passcode requirement for accessing Private Tabs. This affected Brave iOS version 1.88 and iOS version 26.4.2. The vulnerability was addressed by Brave to require Face ID when opening a new private tab from the Brave playlist.
📂 Report JSON File: 3693295
@hackeronereports