CVE-2025-56219 is an access control vulnerability in SigningHub v8.6.8 where attackers with limited privileges can arbitrarily add user accounts without any rate limiting controls. This can be abused to create excessive user accounts, resulting in resource exhaustion and causing a Denial of Service (DoS). The vulnerability is classified under CWE-284 (Improper Access Control) and has a CVSS 3.1 base score of 7.1, indicating high severity. There is no indication of known exploits in the wild and no patch or official fix has been provided as of the published date.

The vulnerability allows attackers to add user accounts without restriction, which can lead to resource exhaustion on the affected system. This results in a Denial of Service (DoS) condition, impacting availability. There is no confidentiality impact, but integrity is affected due to unauthorized account creation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, it is recommended to monitor for unusual account creation activity and restrict access to the account creation functionality to trusted users only. Implementing manual rate limiting or additional access controls may help mitigate exploitation risk.