CVE-2025-12970
High · 8.8CVSS
8.8
EPSS
1.0%
Published
Nov 24, 2025
CISA due date
—
The record
The extract_name function in Fluent Bit in_docker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary code execution.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Bitnami | fluent-bit | 4.1.0 | 4.1.1 |
Related vulnerabilities
- CVE-2025-12969 Fluent Bit in_forward input plugin does not properly enforce the security.users… Also affects fluent-bit
- CVE-2025-12978 Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins contain a flaw in the… Also affects fluent-bit
- CVE-2025-12972 Fluent Bit out_file plugin does not properly sanitize tag values when deriving output… Also affects fluent-bit
- CVE-2025-12977 Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize… Also affects fluent-bit