CVE-2024-26455

fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/custom_calyptia/calyptia.c.

CVE-2024-4323

CVE-2024-4323 is a memory corruption vulnerability in Fluent Bit caused by inadequate bounds checking in the embedded HTTP server’s trace request handling. The issue allows heap buffer overflow from copying request data without proper validation, potentially leading to Denial of Service, informat...

CVE-2024-23722

In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crashes and does not restart. This could result in logs not being delivered properly.

CVE-2024-50608

Fluent Bit version 3.1.9 is vulnerable to a remote Denial of Service (DoS) attack via the Prometheus Remote Write input plugin. When the plugin listens on an IP address and port, an attacker with access to the endpoint can send a packet with a Content-Length of 0 , triggering a NULL pointer deref...

CVE-2024-50609

A NULL pointer dereference in Fluent Bit version 3.1.9 allows for a remote Denial of Service (DoS) attack. When the OpenTelemetry input plugin is active and listening on a network port, an attacker with access to the endpoint can send a packet with a Content-Length: 0. This causes the cfl_sds_len...

CVE-2021-36088

CVE-2021-36088 affects Fluent Bit (fluent-bit) versions 1.7.0–1.7.4. The root cause is a double free in flb_free (called from flb_parser_json_do and flb_parser_do ). CVSS data in connected sources indicate a high/critical impact with network access and no authentication required, affecting confid...

CVE-2020-35963

Vulnerability : Fluent Bit

CVE-2025-29477

A local vulnerability exists in fluent-bit v.3.7.2 that allows a local attacker to cause a denial of service (DoS) . The issue originates within the consume_event function and is classified under CWE-400: Uncontrolled Resource Consumption . While the vulnerability is confirmed, specific details r...

CVE-2021-27186

Fluent Bit 1.6.10 is affected by CVE-2021-27186 due to a NULL pointer dereference caused by an unvalidated flb_malloc return in flb_avro.c or in the HTTP server endpoint at http_server/api/v1/metrics.c. This vulnerability can lead to a crash; exploitation details or active exploit status are not ...

CVE-2025-12970

The Fluent Bit log collection and processing tool is vulnerable to a stack buffer overflow within the extract_name function of the in_docker input plugin. The root cause is the copying of container names into a fixed-size stack buffer without proper length validation. An attacker capable of creat...

CVE-2025-29478

A vulnerability in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service (DoS) via the cfl_list_size in cfl_list.h:165. While one report identifies the issue as a heap use-after-free within the YAML configuration parser triggered by a crafted YAML input file, other documentation...

CVE-2025-12977

The Fluent Bit log processing tool is vulnerable to a security flaw in its in_http , in_splunk , and in_elasticsearch input plugins. The root cause is a failure to sanitize the tag_key parameter, allowing attackers with network access or record-writing capabilities to inject special characters li...

CVE-2025-12969

The Fluent Bit log processing tool contains a vulnerability in the in_forward input plugin due to improper enforcement of the security.users authentication mechanism under specific configuration conditions. This flaw allows remote attackers with network access to the exposed instance to bypass au...

CVE-2021-46878

Treasure Data Fluent Bit 1.7.1 is affected. The vulnerability stems from an error in flb_pack_msgpack_to_json_format that causes type confusion by interpreting stack data as msgpack maps/arrays, leading to use-after-free. This could allow an attacker to craft a specially crafted file and trigger ...

CVE-2025-12972

The Fluent Bit logging and processing tool is vulnerable to a path traversal attack in its out_file plugin. The root cause is the failure to properly sanitize tag values when deriving output file names; if the File option is omitted, the plugin uses untrusted tag input to construct file paths. Th...

CVE-2019-9749

The CVE-2019-9749 entry pertains to Fluent Bit’s MQTT input plugin (up to version 1.0.4) when acting as an MQTT broker. The root cause is in mqtt_packet_drop (plugins/in_mqtt/mqtt_prot.c): after processing a crafted packet, memmove() is invoked with a negative size, causing a crash of the Fluent ...

CVE-2021-46879

The CVE-2021-46879 issue affects Treasure Data Fluent Bit 1.7.1. A wrong variable is used when reading msgpack data, causing a heap overflow in flb_msgpack_gelf_value_ext. This can be triggered by a crafted file opened with Fluent Bit, potentially allowing arbitrary code execution on the target s...

CVE-2025-12978

The Fluent Bit log collection and processing tool contains a vulnerability in the in_http, in_splunk, and in_elasticsearch input plugins. The flaw exists in the tag_key validation logic , which fails to enforce exact key-length matching, allowing a tag prefix to be incorrectly treated as a full m...