Path Traversal Vulnerability in Fluent Bit Output Plugin

CVE-2025-12972

What is CVE-2025-12972?

The output plugin of Fluent Bit does not adequately sanitize tag values when generating output file names. This oversight allows attackers with network access to exploit untrusted tag inputs, crafting tags that contain path traversal sequences. As a result, malicious users could redirect the output, leading Fluent Bit to write files outside the designated output directory. It is crucial for users to be aware of this vulnerability and implement necessary security measures to mitigate potential risks.

References