CVE-2025-12969
CVE-2025-12969
6.5
MEDIUM
CVSS 3.1
EPSS 0.10%
Description
Fluent Bit in_forward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions. This allows remote attackers with network access to the Fluent Bit instance exposing the forward input to send unauthenticated data. By bypassing authentication controls, attackers can inject forged log records, flood alerting systems, or manipulate routing decisions, compromising the authenticity and integrity of ingested logs.
How to fix CVE-2025-12969
To remediate CVE-2025-12969, upgrade the affected package to a fixed version below.
- —upgrade to 4.1.1 or later
Is CVE-2025-12969 being exploited?
Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- >= 4.1.0, < 4.1.1
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM6.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N |