ID:12901 - Exploit for Path traversal in Fluentd - CVE-2026-44024

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code.

The vulnerability exists due to path traversal in the `${tag}` placeholder handling in file path configuration when processing log tags from untrusted sources. A remote attacker can inject path traversal sequences into a crafted tag to execute arbitrary code.

Exploitation requires the `${tag}` placeholder to be used in file-related configuration such as the `path` parameter, and certain formatting options can enable arbitrary file write or overwrite of existing files.

Remediation