Authentication Bypass in Fluent Bit's In_forward Input Plugin

CVE-2025-12969

What is CVE-2025-12969?

A security flaw in Fluent Bit's in_forward input plugin allows unauthorized users to bypass the security.authentication mechanism under specific configuration settings. This vulnerability enables remote attackers with network access to exploit the Fluent Bit instance, potentially injecting unauthenticated data. By circumventing established authentication controls, attackers may insert forged log records, disrupt alerting systems, or alter routing decisions, jeopardizing the authenticity and integrity of the logs being ingested.

References