CVE-2024-4323: Treasuredata Fluent Bit

Critical severity, CVSS 9.8. EPSS: 27.2% chance of exploitation in the next 30 days.

A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, information disclosure, or remote code execution.

Affected products

• Treasuredata Fluent Bit: from 2.0.7, before 2.2.3 (fixed in 2.2.3); from 3.0.0, before 3.0.4 (fixed in 3.0.4)

Published 2024-05-20. Last modified 2026-06-17.