Researchers discovered a privacy vulnerability in Firefox Private Browsing and Tor Browser that allows websites to track users and link their anonymous identities. By exploiting IndexedDB database ordering, the flaw creates a persistent fingerprint that can connect separate Tor sessions even after all private windows are closed.