How severe is CVE-2025-46814?

CVE-2025-46814 has a CVSS 3.x base score of 3.4, rated low severity. It is exploitable over network with high attack complexity, requires no privileges and user interaction. Impact on confidentiality is low, integrity none, and availability none.

Is CVE-2025-46814 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (21st percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2025-46814?

CVE-2025-46814 affects Fastapi-guard Fastapi Guard. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2025-46814?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2025-46814 have an EU (EUVD) identifier?

Yes. CVE-2025-46814 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-13598.

When was CVE-2025-46814 published?

CVE-2025-46814 was published on 2025-05-06 and last updated on 2026-06-17.

CVE-2025-46814

CVE-2025-46814 is a low-severity vulnerability in Fastapi-guard Fastapi Guard with a CVSS 3.x base score of 3.4. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-74.

Key facts

Severity: Low (CVSS 3.x base score 3.4)
EPSS exploit prediction: 0% (21st percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-13598
Weakness: CWE-74
Affected product: Fastapi-guard Fastapi Guard
Published: 2025-05-06
Last modified: 2026-06-17

Description

FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and detect penetration attempts. An HTTP header injection vulnerability has been identified in versions prior to 2.0.0. By manipulating the X-Forwarded-For header, an attacker can potentially inject arbitrary IP addresses into the request. This vulnerability can allow attackers to bypass IP-based access controls, mislead logging systems, and impersonate trusted clients. It is especially impactful when the application relies on the X-Forwarded-For header for IP-based authorization or authentication. Users should upgrade to FastAPI Guard version 2.0.0 to receive a fix.

Frequently asked questions

What is CVE-2025-46814?: FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and detect penetration attempts. An HTTP header injection vulnerability has been identified in versions prior to 2.0.0. By manipulating the X-Forwarded-For header, an attacker can potentially inject arbitrary IP addresses into the request. This vulnerability can allow attackers to bypass IP-based access controls, mislead logging systems, and impersonate trusted clients. It is especially impactful when the application relies on the X-Forwarded-For header for IP-based authorization or authentication. Users should upgrade to FastAPI Guard version 2.0.0 to receive a fix.
How severe is CVE-2025-46814?: CVE-2025-46814 has a CVSS 3.x base score of 3.4, rated low severity. It is exploitable over network with high attack complexity, requires no privileges and user interaction. Impact on confidentiality is low, integrity none, and availability none.
Is CVE-2025-46814 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (21st percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-46814?: CVE-2025-46814 affects Fastapi-guard Fastapi Guard. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-46814?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2025-46814 have an EU (EUVD) identifier?: Yes. CVE-2025-46814 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-13598.
When was CVE-2025-46814 published?: CVE-2025-46814 was published on 2025-05-06 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:fastapi-guard:fastapi_guard:*:*:*:*:*:*:*:*

More vulnerabilities in Fastapi-guard Fastapi Guard

CVE-2025-54365 — High (CVSS 7.5): fastapi-guard is a security library for FastAPI that provides middleware to control IPs, log requests, detect…
CVE-2025-53539 — High (CVSS 7.5): FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and detect…

All CVEs affecting Fastapi-guard Fastapi Guard →

Other CWE-74 (Improper Neutralization of Special Elements (Injection)) vulnerabilities

CVE-2026-25586 — Critical (CVSS 10.0): SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, a sandbox escape is possible by shadowing hasOwnProperty…
CVE-2026-25520 — Critical (CVSS 10.0): SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, The return values of functions aren't wrapped.…
CVE-2025-20265 — Critical (CVSS 10.0): A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center (FMC) Software could…
CVE-2025-20337 — Critical (CVSS 10.0): A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to…
CVE-2025-20281 — Critical (CVSS 10.0): A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to…
CVE-2024-42472 — Critical (CVSS 10.0): Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious…

Browse all CWE-74 (Improper Neutralization of Special Elements (Injection)) vulnerabilities →