StackRadarChart IndexLive demo

CVE-2026-44161

High

Advisory

Published 26 Jun 2026In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.2; base score, highest
EPSS: 0.004; 37th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 16; of 17,781 indexed, latest versions
Container images: 13; deployed by those charts
Fix available: 1 of 1; affected package

Fluentd is Vulnerable to Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`

Carried by container images the latest versions of 16 of 17,781 indexed charts deploy, on 13 images.

Affected package	Affected versions	Fixed in	Images
fluentdgem	0.12.43, 1.2.6, 1.3.3, 1.4.2+8 more	1.19.3	13

OSV records: GHSA-72f5-rr8c-r6gr
Also known as: BIT-fluentd-2026-44161

Charts affected

16 by stars

Chart

Latest

Affected images

Radar Score

efkcryptexlabs

1 of 3 See more

efk cryptexlabs 7.17.3

1 of the 3 container images this version deploys carry CVE-2026-44161.

Container image	Digest	Package	Fixed in
fluent/fluentd-kubernetes-daemonset :v1.12.4-debian-elasticsearch7-1.0	656423b5fabb	fluentd@1.12.4	1.19.3

Open the chart page →

1,299

fluentdbryanalves

1 of 1 See more

fluentd bryanalves 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44161.

Container image	Digest	Package	Fixed in
bryanalves/fluentd :0.5	d3605be4b178	fluentd@1.2.6	1.19.3

Open the chart page →

723

fluentd-cloudwatchcloudnativeapp

1 of 2 See more

fluentd-cloudwatch cloudnativeapp 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-44161.

Container image	Digest	Package	Fixed in
fluent/fluentd-kubernetes-daemonset :v1.3.3-debian-cloudwatch-1.0	17398121d3cc	fluentd@1.3.3	1.19.3

Open the chart page →

1,342

fluentd-kubernetes-awscloudposse

1 of 2 See more

fluentd-kubernetes-aws cloudposse 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-44161.

Container image	Digest	Package	Fixed in
fluent/fluentd-kubernetes-daemonset :v1.4.2-debian-elasticsearch-1.1	ce4885865850	fluentd@1.4.2	1.19.3

Open the chart page →

1,305

monitoring-stackdata354-helm

1 of 4 See more

monitoring-stack data354-helm 1.4.2

1 of the 4 container images this version deploys carry CVE-2026-44161.

Container image	Digest	Package	Fixed in
grafana/fluent-plugin-loki :latest	8a3882e8c28b	fluentd@1.19.0	1.19.3

Open the chart page →

3,176

coralogix-fluentddevtron

1 of 1 See more

coralogix-fluentd devtron 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-44161.

Container image	Digest	Package	Fixed in
coralogixrepo/fluentd-coralogix-image :1.1.6	b976e0412424	fluentd@1.8.1	1.19.3

Open the chart page →

750

coralogix-fluentddevtron-labs

1 of 1 See more

coralogix-fluentd devtron-labs 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-44161.

Container image	Digest	Package	Fixed in
coralogixrepo/fluentd-coralogix-image :1.1.6	b976e0412424	fluentd@1.8.1	1.19.3

Open the chart page →

750

gwangju_2-3gwangju2-3

1 of 5 See more

gwangju_2-3 gwangju2-3 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-44161.

Container image	Digest	Package	Fixed in
fluent/fluentd-kubernetes-daemonset :v1.10.3-debian-cloudwatch-1.0	19a8f0662241	fluentd@1.10.3	1.19.3

Open the chart page →

6,491

1 of 1 See more

fluentd helm 0.2.16

1 of the 1 container images this version deploys carry CVE-2026-44161.

Container image	Digest	Package	Fixed in
fluent/fluentd-kubernetes-daemonset :v1.14.0-debian-elasticsearch7-1.0	3933cae61054	fluentd@1.14.0	1.19.3

Open the chart page →

1,217

coralogix-fluentdhelmtest

1 of 1 See more

coralogix-fluentd helmtest 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-44161.

Container image	Digest	Package	Fixed in
coralogixrepo/fluentd-coralogix-image :1.1.6	b976e0412424	fluentd@1.8.1	1.19.3

Open the chart page →

750

fluentd-elasticsearchkfirfer

1 of 1 See more

fluentd-elasticsearch kfirfer 13.9.1

1 of the 1 container images this version deploys carry CVE-2026-44161.

Container image	Digest	Package	Fixed in
quay.io/fluentd_elasticsearch/fluentd :v4.2.3	99079df58561	fluentd@1.15.3	1.19.3

Open the chart page →

1,178

lm-logslogicmonitor

1 of 1 See more

lm-logs logicmonitor 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-44161.

Container image	Digest	Package	Fixed in
logicmonitor/lm-logs-k8s-fluentd :1.0.5	5ac21b3f1572	fluentd@1.16.1	1.19.3

Open the chart page →

1,029

fluentd-papertrailmozilla

1 of 1 See more

fluentd-papertrail mozilla 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-44161.

Container image	Digest	Package	Fixed in
fluent/fluentd-kubernetes-daemonset :papertrail	9c209835eea1	fluentd@0.12.43	1.19.3

Open the chart page →

1,001

coralogix-fluentdromholdings

1 of 1 See more

coralogix-fluentd romholdings 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-44161.

Container image	Digest	Package	Fixed in
coralogixrepo/fluentd-coralogix-image :1.1.6	b976e0412424	fluentd@1.8.1	1.19.3

Open the chart page →

750

fluentdslamdev

1 of 1 See more

fluentd slamdev 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-44161.

Container image	Digest	Package	Fixed in
fluent/fluentd-kubernetes-daemonset :v1.11.5-debian-forward-1.0	0717111a3362	fluentd@1.11.5	1.19.3

Open the chart page →

1,384

fluentd-operatorstatcan

1 of 1 See more

fluentd-operator statcan 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-44161.

Container image	Digest	Package	Fixed in
vmware/kube-fluentd-operator :latest	f028c138a5f4	fluentd@1.16.1	1.19.3

Open the chart page →

1,955

Container images carrying it

13 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
coralogixrepo/fluentd-coralogix-image :1.1.6	b976e0412424	fluentd@1.8.1	1.19.3	4
bryanalves/fluentd :0.5	d3605be4b178	fluentd@1.2.6	1.19.3	1
fluent/fluentd-kubernetes-daemonset :v1.11.5-debian-forward-1.0	0717111a3362	fluentd@1.11.5	1.19.3	1
fluent/fluentd-kubernetes-daemonset :v1.3.3-debian-cloudwatch-1.0	17398121d3cc	fluentd@1.3.3	1.19.3	1
fluent/fluentd-kubernetes-daemonset :v1.10.3-debian-cloudwatch-1.0	19a8f0662241	fluentd@1.10.3	1.19.3	1
fluent/fluentd-kubernetes-daemonset :v1.14.0-debian-elasticsearch7-1.0	3933cae61054	fluentd@1.14.0	1.19.3	1
fluent/fluentd-kubernetes-daemonset :v1.12.4-debian-elasticsearch7-1.0	656423b5fabb	fluentd@1.12.4	1.19.3	1
fluent/fluentd-kubernetes-daemonset :papertrail	9c209835eea1	fluentd@0.12.43	1.19.3	1
fluent/fluentd-kubernetes-daemonset :v1.4.2-debian-elasticsearch-1.1	ce4885865850	fluentd@1.4.2	1.19.3	1
grafana/fluent-plugin-loki :latest	8a3882e8c28b	fluentd@1.19.0	1.19.3	1
logicmonitor/lm-logs-k8s-fluentd :1.0.5	5ac21b3f1572	fluentd@1.16.1	1.19.3	1
vmware/kube-fluentd-operator :latest	f028c138a5f4	fluentd@1.16.1	1.19.3	1
quay.io/fluentd_elasticsearch/fluentd :v4.2.3	99079df58561	fluentd@1.15.3	1.19.3	1