CVE-2025-57815: 
Python vulnerability analysis and mitigation

The Fides Admin UI login endpoint vulnerability (CVE-2025-57815) was discovered and disclosed on September 8, 2025. This security issue affects Fides, an open-source privacy engineering platform, in versions prior to 2.69.1. The vulnerability stems from the login endpoint relying on a general IP-based rate limit for all API traffic while lacking specific anti-automation controls designed to protect against brute-force attacks (GitHub Advisory).

The vulnerability is classified as CWE-307 (Improper Restriction of Excessive Authentication Attempts). The system uses a configurable, system-wide rate limit to control traffic from any single IP address. However, because this single limit must be set high enough to accommodate endpoints that receive a large volume of legitimate traffic, it offers only weak protection for the login endpoint. The CVSS v3.1 base score is 6.5 (MEDIUM), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N (NVD).

While password complexity requirements and the global rate limit make traditional brute-force attacks against single accounts difficult, the lack of authentication-specific protections exposes Fides to more targeted attacks. Attackers could potentially conduct credential testing attacks, such as credential stuffing or password spraying, which poses a risk to accounts with weak or previously compromised passwords. If successful, an attacker would gain full access to the compromised user's privileges within the Fides Admin UI (GitHub Advisory).

The vulnerability has been patched in Fides version 2.69.1, which implements stricter rate limiting to authentication endpoints. For organizations with commercial Fides Enterprise licenses, a workaround is available through configuring Single Sign-On (SSO) via an OIDC provider (such as Azure, Google, or Okta). When OIDC SSO is enabled, username/password authentication can be disabled entirely, eliminating the attack vector. However, this functionality is not available for Fides Open Source users (GitHub Release, GitHub Advisory).