Vulnerability in Ethyca Fides
CVE-2025-57815
Fides is an open-source privacy engineering platform. Prior to version 2.69.1, the Fides Admin UI login endpoint relies on a general IP-based rate limit for all API traffic and lacks specific anti-automation controls designed to protect ag…
EPSS: 0.001 (22.5th percentile) — read the EPSS interpretation.
Affected products
- Ethyca Fides — versions < 2.69.1
Weakness classification (CWE)
Public proof-of-concept exploits
References
- https://github.com/ethyca/fides/security/advisories/GHSA-7q62-r88r-j5gw (x_refsource_CONFIRM)
- https://github.com/ethyca/fides/commit/59903c195e2f9f8915a1db94950aefd557033a5c (x_refsource_MISC)
- https://github.com/ethyca/fides/releases/tag/2.69.1 (x_refsource_MISC)
Frequently asked questions
- What is CVE-2025-57815?
- CVE-2025-57815 is a vulnerability in Ethyca Fides, classified under Improper Restriction of Excessive Authentication Attempts. Published 2025-09-08.
- Is CVE-2025-57815 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.