High severity8.1NVD Advisory· Published Aug 25, 2023· Updated Jun 17, 2026

CVE-2023-40580

Description

Freighter is a Stellar chrome extension. It may be possible for a malicious website to access the recovery mnemonic phrase when the Freighter wallet is unlocked. This vulnerability impacts access control to the mnemonic recovery phrase. This issue was patched in version 5.3.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Stellar/Freighter
cpe:2.3:a:stellar:freighter:*:*:*:*:*:*:*:*
Range: <5.3.1
Stellar/Stellar Corellm-fuzzy
Range: >5.3.1
stellar/freighterv5
Range: < 5.3.1

Patches

Vulnerability mechanics

References

github.com/stellar/freighter/commit/81f78ba008c41ce631a3d0f9e4449f4bbd90baeenvdPatch
github.com/stellar/freighter/pull/948nvdPatch
github.com/stellar/freighter/security/advisories/GHSA-vqr6-hwg2-775wnvdPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000