Skip to content
Fluentd vulnerabilities
Newest
-
fluent fluentd
Fluentd: Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`
CVE-2026-44161
Fix available
7.2 High
-
fluent fluentd
Fluentd: Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`
CVE-2026-44160
Fix available
7.5 High
-
fluent fluentd
Fluentd: Exposure of Sensitive Information via Monitor Agent API
CVE-2026-44025
Fix available
7.5 High
-
fluent fluentd
Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder
CVE-2026-44024
Public exploitFix available
9.8 Critical
-
fluentd fluentbit, treasuredata fluent bit +1 more
fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/custom_calyptia...
CVE-2024-26455
Fix available
7.5 High
-
fluentd, fluentd fluentd-ui +1 more
Fluent Fluentd and Fluent-ui use default password
CVE-2020-21514
Fix available
8.8 High
-
fluent fluentd, fedoraproject fedora +1 more
Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)
CVE-2022-39379
Fix available
EPSS 45.0%
3.1 Low
-
fluent fluentd
ReDoS vulnerability in parser_apache2
CVE-2021-41186
Fix available
5.9 Medium
-
cloud native computing foundation (cncf) fluentd, redhat openstack +1 more
Fluentd Escape Sequence Injection Vulnerability
CVE-2017-10906
Fix available
9.8 Critical