cve 2025 12969

CVE-2025-12969 is a critical unauthenticated data-injection vulnerability in Fluent Bit's forward input plugin. The flaw allows an attacker who can reach a Fluent Bit forward listener to bypass the configured security.users control and send unauthenticated records. This enables forged log injection, alert flooding, and routing manipulation, undermining detection, forensics, and trust in centralized logging pipelines. Discussions on WindowsForum cover the technical details of the bypass, its impact on log integrity, and mitigation strategies for systems using Fluent Bit with Elasticsearch or Splunk. The tag is relevant for security professionals and IT administrators managing log forwarding infrastructure.