treasuredata has 3 CVEs on record. The busiest recent month was November 2025 with 3. The median CVSS is 5.4 (medium).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.4
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2025-12969Medium· 6.5Fluent Bit in_forward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions36CVE-2025-12978Medium· 5.4Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins contain a flaw in the tag_key validation logic that fails to enforce exact key-length matching30CVE-2025-12972Medium· 5.3Fluent Bit out_file plugin does not properly sanitize tag values when deriving output file names29
treasuredata vulnerabilities
CVEs affecting treasuredata, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2025-12978Medium· 5.4Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins contain a flaw in the tag_key validation logic that fails to enforce exact key-length matching
Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins contain a flaw in the tag_key validation logic that fails to enforce exact key-length matching. This allows crafted inputs where a tag prefix is incorrectly treated as a f…
CVE-2025-12972Medium· 5.3Fluent Bit out_file plugin does not properly sanitize tag values when deriving output file names
Fluent Bit out_file plugin does not properly sanitize tag values when deriving output file names. When the File option is omitted, the plugin uses untrusted tag input to construct file paths. This allows attackers with network access to …
CVE-2025-12969Medium· 6.5Fluent Bit in_forward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions
Fluent Bit in_forward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions. This allows remote attackers with network access to the Fluent Bit instance exposing the for…