Fluent Bit Vulnerabilities Expose Cloud Services to Takeover

Oligo Security has identified five critical vulnerabilities in the Fluent Bit open-source tool, which is widely used for log collection and processing in cloud environments. The vulnerabilities, tracked as CVE-2025-12972, CVE-2025-12970, CVE-2025-12978, CVE-2025-12977, and CVE-2025-12969, could allow attackers to take over cloud services, tamper with logs, and execute remote code. The issues stem from flaws such as lack of sanitization, buffer overflows, and improper authentication handling.

Affected versions are prior to 4.1.1 and 4.0.12, and users are advised to update to the latest version to mitigate risks. The vulnerabilities pose significant threats to various sectors, including financial services and AI labs.