CVE-2025-12972: Path Traversal
Fluent Bit outfile plugin does not properly sanitize tag values when deriving output file names. When the File option is omitted, the plugin uses untrusted tag input to construct file paths. This allows attackers with network access to craft tags containing path traversal sequences that cause Fluent Bit to write files outside the intended output directory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12972?
The severity of CVE-2025-12972 is considered to be high due to its potential for path traversal attacks.
How do I fix CVE-2025-12972?
To fix CVE-2025-12972, ensure that the File option is specified to avoid relying on untrusted tag inputs.
Who is affected by CVE-2025-12972?
CVE-2025-12972 affects users of the Fluent Bit out_file plugin that do not properly sanitize tag values.
What are the risks associated with CVE-2025-12972?
The risks associated with CVE-2025-12972 include potential unauthorized access to sensitive files on the server.
What does CVE-2025-12972 exploit in Fluent Bit?
CVE-2025-12972 exploits the lack of proper sanitization for tag values when constructing output file names in Fluent Bit.