Fluentd Monitor Agent Plugin Vulnerability Exposing Sensitive Internal Metrics
CVE-2026-44025

7.5HIGH

Key Information:

Vendor: Fluent
Status: Fluentd
Vendor: CVE Published:; 8 July 2026

What is CVE-2026-44025?

The Fluentd Monitor Agent plugin has a critical issue where internal metrics and plugin details are accessible via a REST API, specifically exposing sensitive data such as database passwords, API keys, and cloud credentials. This vulnerability affects versions prior to 1.19.3 and is resolved in the update. Ensuring your Fluentd installation is updated to the latest version is crucial for maintaining data integrity and security.