Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd's Monitor Agent plugin in_monitor_agent exposes internal metrics and plugin information via a REST API, and responses from /api/plugins.json and related endpoints unintentionally include internal instance variables that may contain database passwords, API keys, or cloud credentials. This issue is fixed in version 1.19.3.

An update of the rubygem package has been released.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS,
    Hadoop and so on. Prior to 1.19.3, Fluentd's Monitor Agent plugin in_monitor_agent exposes internal
    metrics and plugin information via a REST API, and responses from /api/plugins.json and related endpoints
    unintentionally include internal instance variables that may contain database passwords, API keys, or
    cloud credentials. This issue is fixed in version 1.19.3. (CVE-2026-44025)

ID	Name	Product	Family	Type	Severity
333802	Photon OS 5.0: Rubygem PHSA-2026-5.0-92-0927	Nessus	PhotonOS Local Security Checks	Local	critical
329206	Photon OS 5.0: Rubygem PHSA-2026-5.0-0927	Nessus	PhotonOS Local Security Checks	Local	critical
444011	SCA: security update for fluentd (GHSA-pr7j-96cj-549h)	Tenable Cloud Security	SCA Checks	Local	high
444011	SCA: security update for fluentd (GHSA-pr7j-96cj-549h)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-44025

high

Tenable Plugins

critical

critical

high

high