Skip to content
OpenAdvisories

Vendor

fluent

8 known vulnerabilities.

Products

fluentd 6 fluent-bit 1 fluent-plugin-s3 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-44024 Public exploit

    Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder

    Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd allows dynamically constructing file paths using the ${tag} placeholder, and insufficient validation of ${tag} in …

    fluent fluentd fluentd RubyGems