Fluent Bit critical input validation tag-processing and authentication bypass flaws authentication bypass flaw
Vulnerability
Summary
Hide ▲
Show ▼
Researchers disclosed critical Fluent Bit vulnerabilities that can let network-reachable attackers tamper with logging pipelines and potentially reach code execution. The flaws affect input validation, tag processing, output handling, a Docker metrics parsing overflow, and an authentication bypass in the forward input plugin. Fixes are available in v4.1.1 and v4.0.12, while older versions remain exposed. Operators are being urged to patch immediately and tighten routing and file controls.
Related Happenings
Fluent Bit telemetry agent flaws multiple vulnerabilities path traversal flaw (CVE-2025-12972)
Vulnerability
First: 24.11.2025 17:03
Last: 24.11.2025 17:03
Sources 1
About this happening:
**Fluent Bit** has five newly disclosed vulnerabilities that can be chained to **compromise cloud and Kubernetes infrastructure**, including **remote code execution**, **log tampe...
Fluent Bit telemetry agent flaws multiple vulnerabilities path traversal flaw (CVE-2025-12972)
VulnerabilityAbout this happening: **Fluent Bit** has five newly disclosed vulnerabilities that can be chained to **compromise cloud and Kubernetes infrastructure**, including **remote code execution**, **log tampe...
Timeline
-
24.11.2025 17:00 2 articles · 6mo ago
Oligo Security discloses critical Fluent Bit vulnerabilities
Initial DisclosureOligo Security disclosed critical vulnerabilities in Fluent Bit, a telemetry agent deployed more than 15 billion times, affecting input validation, tag processing, output handling, Docker metrics parsing, and the forward input plugin. The flaws could let network-reachable attackers spoof tags, inject malicious records, manipulate file paths, trigger a stack buffer overflow, or bypass authentication, and fixes are available in Fluent Bit v4.1.1 and v4.0.12 while older versions remain exposed.
Show sources
- Flaws Expose Risks in Fluent Bit Logging Agent — www.infosecurity-magazine.com — 24.11.2025 17:00
- Flaws Expose Risks in Fluent Bit Logging Agent — www.infosecurity-magazine.com — 24.11.2025 17:00