CVE-2021-46879: Treasuredata Fluent Bit

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in Treasure Data Fluent Bit 1.7.1, a wrong variable is used to get the msgpack data resulting in a heap overflow in flb_msgpack_gelf_value_ext. An attacker can craft a malicious file and tick the victim to open the file with the software, triggering a heap overflow and execute arbitrary code on the target system.

Affected products

• Treasuredata Fluent Bit: version 1.7.1 only

Published 2023-04-11. Last modified 2026-06-17.