Skip to content
OpenAdvisories

Vendor

FluentBit

5 known vulnerabilities.

Products

Fluent Bit 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2025-12978

    CVE-2025-12978

    Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins contain a flaw in the tag_key validation logic that fails to enforce exact key-length matching. This allows crafted inputs where a tag prefix is incorrectly treated as a full match. A remote at…

    FluentBit Fluent Bit
  • Medium 6.5
    CVE-2025-12969

    CVE-2025-12969

    Fluent Bit in_forward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions. This allows remote attackers with network access to the Fluent Bit instance exposing the forward input to send una…

    FluentBit Fluent Bit
  • Medium 5.3
    CVE-2025-12972

    CVE-2025-12972

    Fluent Bit out_file plugin does not properly sanitize tag values when deriving output file names. When the File option is omitted, the plugin uses untrusted tag input to construct file paths. This allows attackers with network access to craft tags containing …

    FluentBit Fluent Bit