Security fixes in fluent-bit-plugin-loki 3.6.5-r0 (CVE-2026-27139)
Affects fluent-bit-plugin-lokiSource GCVE Database
Not known to be exploited · CVSS 2.5 Low · fixed in 3.6.5-r0 : update fluent-bit-plugin-loki when convenient.
Data as of 10/25/2026, 04:40:12 UTC
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 1% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 3.6.5-r0
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| CleanStartfluent-bit-plugin-loki | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should upgrade to fluent-bit-plugin-loki version 3.6.5-r0 or later to apply the security fixes. Since a patch is available, applying this update is the recommended remediation step.
Description
The fluent-bit-plugin-loki package version 3.6.5-r0 addresses five security vulnerabilities, including CVE-2026-27139. A patch is available for these issues. No CVSS score or detailed technical information about the vulnerabilities is provided.
Impact
The vulnerabilities fixed in version 3.6.5-r0 could potentially affect users running this exact version, but no specific impact details or exploitation information is available. There are no known exploits in the wild for these vulnerabilities at this time.