CVE-2026-44541: Ethyca Fides

High severity, CVSS 7.0. EPSS: 0.5% chance of exploitation in the next 30 days.

Fides is an open-source privacy engineering platform. From version 2.33.0 to before version 2.84.5, there is a DOM-based XSS vulnerability in fides.js via the fides_description override. This issue has been patched in version 2.84.5.

Affected products

• Ethyca Fides: from 2.33.0, before 2.84.5 (fixed in 2.84.5)

Published 2026-06-08. Last modified 2026-07-23.