Vulnerability in Ethyca Fides
CVE-2025-57816
Fides is an open-source privacy engineering platform. Prior to version 2.69.1, the Fides Webserver API's built-in IP-based rate limiting is ineffective in environments with CDNs, proxies or load balancers. The system incorrectly applies ra…
EPSS: 0.000 (13.2th percentile) — read the EPSS interpretation.
Affected products
- Ethyca Fides — versions < 2.69.1
Weakness classification (CWE)
Public proof-of-concept exploits
References
- https://github.com/ethyca/fides/security/advisories/GHSA-fq34-xw6c-fphf (x_refsource_CONFIRM)
- https://github.com/ethyca/fides/commit/59903c195e2f9f8915a1db94950aefd557033a5c (x_refsource_MISC)
- https://github.com/ethyca/fides/releases/tag/2.69.1 (x_refsource_MISC)
Frequently asked questions
- What is CVE-2025-57816?
- CVE-2025-57816 is a vulnerability in Ethyca Fides, classified under CWE-799. Published 2025-09-08.
- Is CVE-2025-57816 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.