New Fluent Bit Flaws Expose Cloud to RCE and Stealthy Infrastructure Intrusions

Cybersecurity researchers discovered five critical vulnerabilities in Fluent Bit, an open-source telemetry agent used in cloud infrastructures. The vulnerabilities can be chained together to compromise cloud environments. The flaws allow attackers to bypass authentication, perform path traversal attacks, achieve remote code execution, cause denial-of-service conditions, and manipulate tags. These vulnerabilities pose significant risks to cloud infrastructure security and could enable stealthy infrastructure intrusions.