CVE-2026-44162

fluent-plugin-s3 is an Amazon S3 input and output plugin for Fluentd. From 0.7.0 to 1.8.4, the in_s3 input plugin reads the entire decompressed payload of gzip, lzma2, and lzop objects into memory without enforcing a decompression_size_limit. An attacker with permission to upload objects to the monitored S3 bucket can provide a highly compressed object that expands excessively when Fluentd processes it. The resulting memory exhaustion can cause the operating system to terminate the Fluentd process and disrupt all log collection on the affected node. This issue is fixed in version 1.8.5.

• CWE-409

• https://github.com/fluent/fluent-plugin-s3/commit/e085aee001d15bcc4bd073507e74075e30550fd0
• https://github.com/fluent/fluent-plugin-s3/releases/tag/v1.8.5
• https://github.com/fluent/fluent-plugin-s3/security/advisories/GHSA-xv9w-7v6q-hpjh

Published

Sep 14, 2026

Last Modified

Sep 14, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-44129SEPPmail Secure Email Gateway before version 15.0.4 contains…8.3
• CVE-2026-4415Gigabyte Control Center developed by GIGABYTE has an Arbitra…9.8
• CVE-2026-44159Tyler Identity Local (TID-L) uses documented, default admini…9.8
• CVE-2026-4416The Performance Library component of Gigabyte Control Center…8.5
• CVE-2026-44160Fluentd collects events from various data sources and writes…7.5
• CVE-2026-44161Fluentd collects events from various data sources and writes…7.2
• CVE-2026-44163fluent-plugin-opentelemetry is a Fluentd input and output pl…5.3
• CVE-2026-44166Pocketbase is an open source web backend written in go. Prio…7.6
• CVE-2026-44167phpseclib is a PHP secure communications library. Prior to 1…7.5
• CVE-2026-44168MariaDB server is a community developed fork of MySQL server…8
• CVE-2026-44169MariaDB server is a community developed fork of MySQL server…4.3
• CVE-2026-44170MariaDB server is a community developed fork of MySQL server…9.8