PT-2025-47920 · Unknown+2 · Fluent-Bit+2

Published 2025-11-23 · Updated 2026-03-19 · CVE-2025-12969

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Fluent Bit (affected versions not specified)

Description The Fluent Bit in forward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions. This allows remote attackers with network access to the Fluent Bit instance exposing the forward input to send unauthenticated data. By bypassing authentication controls, attackers can inject forged log records, flood alerting systems, or manipulate routing decisions, compromising the authenticity and integrity of ingested logs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

AZL-71077

AZL-71108

BDU:2025-15406

BIT-FLUENT-BIT-2025-12969

CVE-2025-12969

Affected Products

Fluent-Bit

Fluent Bit In Forward Input Plugin

Red Os

References · 24

• https://osv.dev/vulnerability/AZL-71108 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15406 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-12969 · Security Note
• https://osv.dev/vulnerability/CVE-2025-12969 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-71077 · Vendor Advisory
• https://t.me/msrcreports/2661 · Telegram Post
• https://reddit.com/r/CVEWatch/comments/1p8s6gf/top_10_trending_cves_28112025 · Reddit Post
• https://twitter.com/oss_security/status/1996684245272797281 · Twitter Post
• https://t.me/cveNotify/144279 · Telegram Post
• https://oligo.security/blog/critical-vulnerabilities-in-fluent-bit-expose-cloud-environments-to-remote-takeover · Note
• https://fluentbit.io/blog/2025/10/28/security-vulnerabilities-addressed-in-fluent-bit-v4.1-and-backported-to-v4.0 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-fluent-bit-cve-2025-12969-7.3 · Note
• https://t.me/msrcreports/2317 · Telegram Post
• https://twitter.com/z3nch4n/status/1993888292534685900 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1993051168071725261 · Twitter Post