CVE-2025-57816

CVE-2025-57816 is a high-severity vulnerability in the Fides open-source privacy engineering platform (prior to version 2.69.1) where its built-in IP-based rate limiting is ineffective when deployed behind CDNs, proxies, or load balancers. This allows attackers to bypass rate limits by targeting the infrastructure's IP address instead of the client's, potentially leading to denial of service. The vulnerability has a CVSS score of 7.5 (High) due to its network attack vector, low attack complexity, and high impact on availability, with no impact on confidentiality or integrity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed on the CISA KEV catalog.