Vulnerabilities

TI-2026-32143 CVE-2026-44161 · GHSA-72f5-rr8c-r6gr

Fluentd: Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`

LOW 38

Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00442 Published 2026-07-08 Fixed in 1.19.3 CWE-918

TI-2026-32142 CVE-2026-44160 · GHSA-j9cw-hwqf-85w7

Fluentd: Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`

MEDIUM 40

Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0062 Published 2026-07-08 Fixed in 1.19.3 CWE-409

TI-2026-32065 CVE-2026-44025 · GHSA-pr7j-96cj-549h

Fluentd: Exposure of Sensitive Information via Monitor Agent API

LOW 39

Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00474 Published 2026-07-08 Fixed in 1.19.3 CWE-306

TI-2026-32064 CVE-2026-44024 · GHSA-44hj-4m45-frj3

Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder

MEDIUM 51

Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01085 Published 2026-07-08 Fixed in 1.19.3 CWE-22

TI-2020-14076 CVE-2020-21514 · GHSA-wrxf-x8rm-6ggg

An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated…

MEDIUM 41

An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00786 Published 2023-04-04 No fix listed CWE-276

TI-2022-18753 CVE-2022-39379 · GHSA-fppq-mj76-fpj2

Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)

HIGH 71

Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.44983 Published 2022-11-02 Partial fix · 1.15.3 CWE-502

TI-2021-18025 CVE-2021-41186 · GHSA-hwhf-64mh-r662

ReDoS vulnerability in parser_apache2

LOW 37

Fluentd collects events from various data sources and writes them to files to help unify logging infrastructure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02215 Published 2021-10-29 Partial fix · 1.14.2 CWE-400

TI-2017-07995 CVE-2017-10906 · GHSA-5jrp-w8fr-mrww

Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may…

MEDIUM 49

Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04581 Published 2017-12-08 Partial fix · 0.12.41

Vulnerabilities

Filters