Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd's Monitor Agent plugin in_monitor_agent exposes internal metrics and plugin information via a REST API, and responses from /api/plugins.json and related endpoints unintentionally include internal instance variables that may contain database passwords, API keys, or cloud credentials. This issue is fixed in version 1.19.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🔴 Fluentd, Information Disclosure, #CVE-2026-44025 (High) -DC-Jun2026-674 https://dailycve.com/fluentd-information-disclosure-cve-2026-44025-high-dc-jun2026-674/
Post summary
A concise announcement of the new CVE-2026-44025 that affects Fluentd, describing it as an Information Disclosure vulnerability rated high severity.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | fluentd | fluentd | - | - | - |