CVE-2025-12978 - CVE House
Back to Database
Status published Unknown CVE-2025-12978

CVE-2025-12978

Vulnerability Description

Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins contain a flaw in the tag_key validation logic that fails to enforce exact key-length matching. This allows crafted inputs where a tag prefix is incorrectly treated as a full match. A remote attacker with authenticated or exposed access to these input endpoints can exploit this behavior to manipulate tags and redirect records to unintended destinations. This compromises the authenticity of ingested logs and can allow injection of forged data, alert flooding and routing manipulation.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-12978

Credits & Attribution

No credits recorded in the NVD database.

References

More from FluentBit

View All →
CVE-2025-12977
CVE-2025-12977
Unknown 0
CVE-2025-12972
CVE-2025-12972
Unknown 0
CVE-2025-12970
CVE-2025-12970
Unknown 0
CVE-2025-12969
CVE-2025-12969
Unknown 0

Affected Vendor

Affected Software

Fluent Bit
Vulnerable Versions:
0

Timeline

Official Publish: November 24th, 2025
Last Modified: January 7th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.