
- Fluent Bit flaws allow attackers to manipulate logs and execute remote code
- CVE-2025-12972 permits overwriting files on disk for potential system compromise
- CVE-2025-12970 exploits a stack buffer overflow to trigger remote code execution
A widely used open source log processing tool contains critical flaws that could allow attackers to compromise cloud infrastructure, experts have warned.