fides

Securing AI Agents with Information-Flow Control This repository contains a Jupyter notebook to accompany the academic paper "Securing AI Agents with Information-Flow Control". The notebook is structured as a tutorial to walk readers through the concepts introduced in the paper. This illustrates ...

Fides Privacy Center ≤ 2.39.1 - Server-Side URL Disclosure

Fides versions 2.19.0 to before 2.39.2rc0 contain an information disclosure caused by unauthenticated HTTP GET request to the Privacy Center, letting attackers access the SERVERSIDEFIDESAPIURL, which may reveal server configuration details, exploit requires no authentication. id: CVE-2024-31223...

ethyca-fides (>=2.10.0, <=2.13.0) potentially affected by CVE-2026-77401 via accesscontrol (6.0.0)

accesscontrol PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on accesscontrol and may be impacted: - ethyca-fides =2.10.0, =2.13.0 Source cves: CVE-2026-77401 Source advisory: OSV:PYSEC-2026-4022...

a2grunnerp (>=0.1.0, <=0.1.8), dothttp-req (>=0.0.42a3, <=0.0.42a10) +2 more potentially affected by CVE-2026-76825 via restrictedpython (6.0.0)

restrictedpython PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - a2grunnerp =0.1.0, =0.0.42a3, =2.10.0, =2025.9.5, =2025.12.1 Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

ethyca-fides (>=2.10.0, <=2.13.0) potentially affected by CVE-2026-77401 via accesscontrol (6.0.0)

accesscontrol PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on accesscontrol and may be impacted: - ethyca-fides =2.10.0, =2.13.0 Source cves: CVE-2026-77401 Source advisory: OSV:GHSA-PQ59-9FQ7-M886...

a2grunnerp (>=0.1.0, <=0.1.8), dothttp-req (>=0.0.42a3, <=0.0.42a10) +2 more potentially affected by CVE-2026-76825 via restrictedpython (6.0.0)

restrictedpython PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - a2grunnerp =0.1.0, =0.0.42a3, =2.10.0, =2025.9.5, =2025.12.1 Source cves: CVE-2026-76825 Source advisory: OSV:GHSA-HP3V-5VW7-FX9...

dcicsnovault (>=2.0.0b4, <=2.0.0b7), ethyca-fides (>=2.10.0, <=2.13.0) +2 more potentially affected by CVE-2026-77401 via accesscontrol (>=4.4.0, <=6.0.0)

accesscontrol PYPI version =4.4.0, =2.0.0b4, =2.10.0, =4.6.3, =4.8.11 Source cves: CVE-2026-77401 Source advisory: MEND:CVE-2026-77401...

a2grunnerp (>=0.1.0, <=0.1.8), dothttp-req (>=0.0.42a3, <=0.0.42a10) +2 more potentially affected by CVE-2026-55830 via restrictedpython (6.0.0)

restrictedpython PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - a2grunnerp =0.1.0, =0.0.42a3, =2.10.0, =2025.9.5, =2025.12.1 Source cves: CVE-2026-55830 Source advisory: OSV:PYSEC-2026-3917...

a2grunnerp (>=0.1.0, <=0.1.8), dothttp-req (>=0.0.42a3, <=0.0.42a10) +2 more potentially affected by CVE-2026-55830 via restrictedpython (6.0.0)

restrictedpython PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - a2grunnerp =0.1.0, =0.0.42a3, =2.10.0, =2025.9.5, =2025.12.1 Source cves: CVE-2026-55830 Source advisory: OSV:GHSA-FFG3-P8FM-MJX...

Fides Privacy Center ≤ 2.39.1 - Server-Side URL Disclosure Detection

Fides versions 2.19.0 to before 2.39.2rc0 contain an information disclosure caused by unauthenticated HTTP GET request to the Privacy Center, letting attackers access the SERVERSIDEFIDESAPIURL, which may reveal server configuration details, exploit requires no authentication. !/usr/bin/env python...

PYSEC-2026-2470 ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override

Summary fides.js is the script that renders Fides's consent banner on customer websites. It lets the embedding page override the banner's description text at runtime via a URL query parameter, a JavaScript global, or a cookie. On sites that have opted into HTML-formatted descriptions, the...

PYSEC-2026-2471 Ethyca Fides has a Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection

Summary Fides deployments that enable both subject identity verification and duplicate privacy request detection are affected by a vulnerability in which an administrator can approve a privacy request whose identity was never verified. For erasure policies, this can result in unauthorized deletio...

Ethyca Fides has a Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection

SummaryFides deployments that enable both subject identity verification and duplicate privacy request detection are affected by a vulnerability in which an administrator can approve a privacy request whose identity was never verified. For erasure policies, this can result in unauthorized deletion...

ethyca-fides (>=2.10.0, <=2.13.0) potentially affected by CVE-2024-51734 via accesscontrol (6.0.0)

accesscontrol PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on accesscontrol and may be impacted: - ethyca-fides =2.10.0, =2.13.0 Source cves: CVE-2024-51734 Source advisory: OSV:PYSEC-2026-2326...

ethyca-fides (>=2.10.0, <=2.13.0) potentially affected by CVE-2023-41050 via accesscontrol (6.0.0)

accesscontrol PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on accesscontrol and may be impacted: - ethyca-fides =2.10.0, =2.13.0 Source cves: CVE-2023-41050 Source advisory: OSV:PYSEC-2026-2325...

PT-2026-59137

Summary fides.js is the script that renders Fides's consent banner on customer websites. It lets the embedding page override the banner's description text at runtime via a URL query parameter, a JavaScript global, or a cookie. On sites that have opted into HTML-formatted descriptions, the...

PT-2026-59138

Summary Fides deployments that enable both subject identity verification and duplicate privacy request detection are affected by a vulnerability in which an administrator can approve a privacy request whose identity was never verified. For erasure policies, this can result in unauthorized deletio...

PYSEC-2026-1343 Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation

Summary The OAuth client creation and update endpoints of the Fides Webserver API do not properly authorize scope assignment. This allows highly privileged users with client:create or client:update permissions to escalate their privileges to owner-level. Details When creating or updating OAuth...

PYSEC-2026-1341 Fides Webserver API Rate Limiting Vulnerability in Proxied Environments

Summary The Fides Webserver API's built-in IP-based rate limiting is ineffective in environments with CDNs, proxies or load balancers. The system incorrectly applies rate limits based on directly connected infrastructure IPs rather than client IPs, and stores counters in-memory rather than in a...

PYSEC-2026-1335 Fides has a Lack of Brute-Force Protections on Authentication Endpoints

Summary The Fides Admin UI login endpoint relies on a general IP-based rate limit for all API traffic and lacks specific anti-automation controls designed to protect against brute-force attacks. This could allow attackers to conduct credential testing attacks, such as credential stuffing or...