Vulnerabilityhigh

New Fluent Bit Flaws Expose Cloud to RCE and Stealthy Infrastructure Intrusions

The Hacker Newsby @TheHackersNewsNov 24, 2025 · 15:27 UTC (Nov 24, 2025)2 min read3

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-12972 CVE-2025-12970 CVE-2025-12978 CVE-2025-12977 CVE-2025-12969 CVE-2024-4323

Tags: cve-2025-12972 cve-2025-12970 cve-2025-12978 cve-2025-12977 cve-2025-12969 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-4323	A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3	9.8	27%	PoC	May 20, 2024
CVE-2025-12977 +4 related CVEs CVE-2025-12970 CVE-2025-12969 CVE-2025-12978 CVE-2025-12972	Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs	9.1 group max	<1%		Nov 24, 2025

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Nov 24, 2025 Vulnerability / Container Security Cybersecurity researchers have discovered five vulnerabilities in Fluent Bit , an open-source and lightweight telemetry agent, that could be chained to compromise and take over cloud infrastructures.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.