CVE-2025-12970

CVE-2025-12970 is a critical buffer overflow vulnerability in the Fluent Bit in_docker input plugin, specifically within the extract_name function, affecting Treasure Data Fluent Bit. An attacker with the ability to create or control container names can exploit this by providing an excessively long name, leading to a process crash or arbitrary code execution. With a CVSS score of 8.8 (High), this vulnerability is remotely exploitable with low complexity, potentially resulting in complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating high awareness and potential for future exploitation.