CVE-2025-57817

CVE-2025-57817 is a high-severity vulnerability affecting the Fides open-source privacy engineering platform, specifically versions prior to 2.69.1. It allows highly privileged users with client creation or update permissions to escalate their privileges to owner-level due to improper authorization of scope assignment in the OAuth client endpoints. The vulnerability has a CVSS score of 7.2 (HIGH) with a vector indicating network access, low attack complexity, and high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.