CVE-2025-12970: CVE-2025-12970
FluentBit · Fluent Bit
Vendor fix available · Affected: FluentBit Fluent Bit · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 65% of scored CVEs
DescriptionCVE.org
The extract_name function in Fluent Bit in_docker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary code execution.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- FluentBit · Fluent Bitbefore 4.0.12
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- FluentBit
- Published
- November 2025
CoverageNo articles yet
No CyberSIXT article names CVE-2025-12970 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.