CVE-2025-12978 CVE-2025-12978

Fluent Bit inhttp, insplunk, and inelasticsearch input plugins contain a flaw in the tagkey validation logic that fails to enforce exact key-length matching. This allows crafted inputs where a tag prefix is incorrectly treated as a full match. A remote attacker with authenticated or exposed acces...

CVE-2025-12978

The Fluent Bit log collection and processing tool contains a flaw in the tag_key validation logic within the in_http , in_splunk , and in_elasticsearch input plugins. The vulnerability stems from a failure to enforce exact key-length matching, allowing a tag prefix to be incorrectly treated as a ...

CVE-2025-12978 CVE-2025-12978

Fluent Bit inhttp, insplunk, and inelasticsearch input plugins contain a flaw in the tagkey validation logic that fails to enforce exact key-length matching. This allows crafted inputs where a tag prefix is incorrectly treated as a full match. A remote attacker with authenticated or exposed acces...

Fluent Bit security vulnerabilities

Fluent Bit is an open source log processing and analyzing system written in C by Fluent Open Source. A security vulnerability exists in Fluent Bit that stems from a failure to properly implement the security.users authentication mechanism, which could lead to a remote attacker sending...