CVE-2026-44161
Last modified
CVE-2026-44161 is a high-severity vulnerability rated 7.2/10 on the CVSS scale. Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, the Fluentd out_http output plugin allows placeholders such as ${tag} in the endpoint configuration parameter, and if a placeholder value is derived from untrusted input an attacker can control the destination hostname of outbound HTTP requests and force requests to arbitrary internal services. EPSS estimates a 0.45% chance of exploitation in the next 30 days.
Description
Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, the Fluentd out_http output plugin allows placeholders such as ${tag} in the endpoint configuration parameter, and if a placeholder value is derived from untrusted input an attacker can control the destination hostname of outbound HTTP requests and force requests to arbitrary internal services. This issue is fixed in version 1.19.3.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Fluentd | Fluentd | < 1.19.3 |
References
- https://github.com/fluent/fluentd/pull/5394Issue Tracking, Patch
- https://github.com/fluent/fluentd/releases/tag/v1.19.3Product, Release Notes
- https://github.com/fluent/fluentd/security/advisories/GHSA-72f5-rr8c-r6grMitigation, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-44161?
How severe is CVE-2026-44161?
How do I fix CVE-2026-44161?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-44128SEPPmail Secure Email Gateway before version 15.0.2.1 allows…9.3
- CVE-2026-44129SEPPmail Secure Email Gateway before version 15.0.4 contains…8.3
- CVE-2026-4415Gigabyte Control Center developed by GIGABYTE has an Arbitra…9.8
- CVE-2026-44159Tyler Identity Local (TID-L) uses documented, default admini…9.8
- CVE-2026-4416The Performance Library component of Gigabyte Control Center…8.5
- CVE-2026-44160Fluentd collects events from various data sources and writes…7.5
- CVE-2026-44166Pocketbase is an open source web backend written in go. Prio…7.6
- CVE-2026-44167phpseclib is a PHP secure communications library. Prior to 1…7.5
- CVE-2026-44168MariaDB server is a community developed fork of MySQL server…8
- CVE-2026-44169MariaDB server is a community developed fork of MySQL server…4.3
- CVE-2026-44170MariaDB server is a community developed fork of MySQL server…9.8
- CVE-2026-44171MariaDB server is a community developed fork of MySQL server…7.8
Are you affected by CVE-2026-44161?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST