CVE-2024-26455

The fluent-bit software version 2.2.2 is vulnerable to a Use-After-Free vulnerability located in the /fluent-bit/plugins/custom_calyptia/calyptia.c component. This flaw allows for potential high availability impact as indicated by its CVSS score of 7.5. Remediation involves upgrading the package ...

CVE-2024-4323

CVE-2024-4323 is a memory corruption vulnerability in Fluent Bit caused by inadequate bounds checking in the embedded HTTP server’s trace request handling. The issue allows heap buffer overflow from copying request data without proper validation, potentially leading to Denial of Service, informat...

CVE-2024-23722

In Fluent Bit versions 2.1.8 through 2.2.1 , a NULL pointer dereference occurs when processing an invalid HTTP payload with the x-www-form-urlencoded content type. This vulnerability allows a malicious actor to trigger a service failure, causing the application to crash and fail to restart, which...

CVE-2024-50608

A NULL pointer dereference exists in Fluent Bit (specifically version 3.1.9 ) when the Prometheus Remote Write input plugin is active and listening on an IP address and port. The vulnerability is triggered by sending a packet with a Content-Length: 0 , which causes the cfl_sds_len function to att...

CVE-2024-50609

An issue in Fluent Bit 3.1.9 allows an attacker with access to the endpoint to perform a remote Denial of Service (DoS) attack. When the OpenTelemetry input plugin is active and listening on an IP and port, sending a packet with Content-Length: 0 triggers a NULL pointer dereference . This occurs ...

CVE-2021-36088

CVE-2021-36088 affects Fluent Bit (fluent-bit) versions 1.7.0–1.7.4. The root cause is a double free in flb_free (called from flb_parser_json_do and flb_parser_do ). CVSS data in connected sources indicate a high/critical impact with network access and no authentication required, affecting confid...

CVE-2020-35963

Vulnerability : Fluent Bit

CVE-2025-29477

A local vulnerability exists in fluent-bit v.3.7.2 where an attacker can trigger a denial of service (DoS) via the consume_event function. This issue is classified as uncontrolled resource consumption (CWE-400). While the vulnerability is confirmed to be exploitable locally, specific details rega...

CVE-2021-27186

Fluent Bit 1.6.10 is affected by CVE-2021-27186 due to a NULL pointer dereference caused by an unvalidated flb_malloc return in flb_avro.c or in the HTTP server endpoint at http_server/api/v1/metrics.c. This vulnerability can lead to a crash; exploitation details or active exploit status are not ...

CVE-2025-12970

The Fluent Bit log collection and processing tool contains a stack buffer overflow vulnerability in the extract_name function of the in_docker input plugin. The flaw occurs because the software copies container names into a fixed-size stack buffer without validating the input length. An attacker ...

CVE-2025-29478

A local vulnerability exists in fluent-bit v.3.7.2 that allows a local attacker to trigger a denial of service (DoS). The root cause is related to the cfl_list_size in cfl_list.h:165, which falls under CWE-400 (Uncontrolled Resource Consumption). While the Red Hat security bulletin mentions a pot...

CVE-2025-12969

The Fluent Bit log collection and processing tool contains a vulnerability in the in_forward input plugin, where it fails to properly enforce the security.users authentication mechanism under specific configuration conditions. This flaw allows remote attackers with network access to the instance ...

CVE-2025-12977

The Fluent Bit log collection tool is vulnerable to input validation issues in its in_http , in_splunk , and in_elasticsearch input plugins. The root cause is a failure to sanitize tag_key inputs, allowing attackers with network access or the ability to write records to supply special characters ...

CVE-2025-12972

The Fluent Bit logging tool's out_file plugin is vulnerable to a path traversal vulnerability (CVE-2025-12972 ) because it fails to properly sanitize tag values when deriving output filenames. If the File option is omitted, the plugin uses untrusted tag input to construct file paths, allowing an ...

CVE-2021-46878

Treasure Data Fluent Bit 1.7.1 is affected. The vulnerability stems from an error in flb_pack_msgpack_to_json_format that causes type confusion by interpreting stack data as msgpack maps/arrays, leading to use-after-free. This could allow an attacker to craft a specially crafted file and trigger ...

CVE-2019-9749

The CVE-2019-9749 entry pertains to Fluent Bit’s MQTT input plugin (up to version 1.0.4) when acting as an MQTT broker. The root cause is in mqtt_packet_drop (plugins/in_mqtt/mqtt_prot.c): after processing a crafted packet, memmove() is invoked with a negative size, causing a crash of the Fluent ...

CVE-2021-46879

The CVE-2021-46879 issue affects Treasure Data Fluent Bit 1.7.1. A wrong variable is used when reading msgpack data, causing a heap overflow in flb_msgpack_gelf_value_ext. This can be triggered by a crafted file opened with Fluent Bit, potentially allowing arbitrary code execution on the target s...

CVE-2025-12978

The Fluent Bit log collection and processing tool contains a flaw in the tag_key validation logic within the in_http , in_splunk , and in_elasticsearch input plugins. The vulnerability stems from a failure to enforce exact key-length matching, allowing a tag prefix to be incorrectly treated as a ...