CVE-2025-12978

描述

Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins contain a flaw in the tag_key validation logic that fails to enforce exact key-length matching. This allows crafted inputs where a tag prefix is incorrectly treated as a full match. A remote attacker with authenticated or exposed access to these input endpoints can exploit this behavior to manipulate tags and redirect records to unintended destinations. This compromises the authenticity of ingested logs and can allow injection of forged data, alert flooding and routing manipulation.

如何修補 CVE-2025-12978

要修補 CVE-2025-12978,請將受影響套件升級到下列已修補版本。

• —升級至 4.1.1 或更新版本

CVE-2025-12978 正在被利用嗎?

低 — EPSS 為 0.3%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• >= 4.1.0, < 4.1.1

CVSS 分數

參考連結(2)

• WEBfluentbit.io/announcements/v4.1.0/
• WEBnvd.nist.gov/vuln/detail/CVE-2025-12978