CVE-2025-29477

Fluent Bit v3.7.2 is affected by a local-privilege DoS in the consume_event function. The CVSSv3.1 base score is 5.5 (MEDIUM); impact is confidentiality/ integrity low, availability high. Some sources note no published mitigation; PT-Security suggests temporarily disabling the consume_event funct...

CVE-2025-29478

Fluent Bit 3.7.2 is affected by CVE-2025-29478. A local attacker can trigger a denial of service via the cfl_list_size in cfl_list.h:165. The issue is documented across multiple sources; no official patch details are provided in these documents. A PTSecurity advisory notes a possible temporary wo...