According to Daniel Roesler there is a privacy issue even if on VPN due to WebRTC. Your real IP can be disclosed by WebRTC. He made also a test page for this WebRTC test page.
There is already a fix for your browsers :
Firefox: Disable WebRTC
Chrome: ScriptSafe