CVE-2026-44024

🗓️ 08 Jul 2026 21:20:29Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 171 Views🌐 WEB

Fluentd CVE-2026-44024 enables RCE via ${tag} traversal in file paths; fixed in 1.19.3.

Reporter	Title	Published	Views	Family All 109
GithubExploit	Exploit for Path Traversal in Fluentd	5 Aug 202608:52	–	githubexploit
attackerkb	CVE-2026-44024	8 Jul 202621:20	–	attackerkb
Chainguard	CVE-2026-44024 vulnerabilities	30 Jun 202620:22	–	cgr
Circl	CVE-2026-44024	1 Jul 202601:15	–	circl
Cvelist	CVE-2026-44024 Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder	8 Jul 202621:20	–	cvelist
EUVD	EUVD-2026-42436	8 Jul 202621:20	–	euvd
Github Security Blog	Fluentd is Vulnerable to Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder	26 Jun 202616:32	–	github
Japan Vulnerability Notes	Multiple vulnerabilities in Fluentd	29 Jun 202605:18	–	jvn
Kitploit	CVE-2026-44024_exploit	2 Oct 202603:02	–	kitploit
NCSC	Vulnerabilities found in Oracle Communications	16 Sep 202613:52	–	ncsc

NVD

Vulners

Node

fluentd fluentdRange<1.19.3

[
  {
    "vendor": "fluent",
    "product": "fluentd",
    "versions": [
      {
        "version": "< 1.19.3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/fluent/fluentd/commit/45c87a81f3ac0b72b3f9dcfe8cfb5f9038f81437
github	www.github.com/fluent/fluentd/pull/5391
github	www.github.com/fluent/fluentd/security/advisories/GHSA-44hj-4m45-frj3
github	www.github.com/fluent/fluentd/releases/tag/v1.19.3

Parameter	Position	Path	Description	CWE
tag	binary	tcp://10.10.10.10:24224	Unauthenticated arbitrary file write via Fluentd out_file plugin using ${tag} path traversal. Attacker-controlled tag is substituted into the output path without sanitizing ../, enabling writing to arbitrary files.	CWE-22

13 Jul 2026 18:48Current

8.5High risk

Vulners AI Score8.5

CVSS 3.19.8

EPSS0.01085

SSVC

CWE-22