---
title: "CVE-2026-44160 (fluentd): Fluentd is Vulnerable to Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`"
url: https://daily.dev/posts/cve-2026-44160-fluentd-fluentd-is-vulnerable-to-denial-of-service-dos-via-gzip-decompression-bo-tuspibkxm
source_url: https://rubysec.com/advisories/CVE-2026-44160
type: article
source: "RUBYLAND"
published: 2026-06-28T12:25:07.341Z
updated: 2026-06-28T12:25:24.224Z
tags: ["security", "ruby"]
reading_time: 1
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# CVE-2026-44160 (fluentd): Fluentd is Vulnerable to Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`

**[RUBYLAND](https://daily.dev/sources/rubyla)** · 1 min read · 0 upvotes · 0 comments

## Summary

A high-severity CVE (CVSS 7.5) has been disclosed in Fluentd affecting the `in_http` and `in_forward` plugins. Both plugins support gzip-compressed data but fail to enforce size limits on decompressed output. An attacker on an untrusted network can send a crafted gzip decompression bomb that expands to an excessive size in memory, bypassing configured payload size limits and causing an Out-of-Memory kill of the Fluentd process. This disrupts all log collection and forwarding on the affected node. The vulnerability is patched in Fluentd version 1.19.3 and later.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://rubysec.com/advisories/CVE-2026-44160>

## Similar posts on daily.dev

- [CVE-2026-44162 \(fluent-plugin-s3\): fluent-plugin-s3 Vulnerable to Denial of Service \(DoS\) via Decompression Bomb in \`in\_s3\`](https://daily.dev/posts/cve-2026-44162-fluent-plugin-s3-fluent-plugin-s3-vulnerable-to-denial-of-service-dos-via-decomp-5nthvttjw) · RUBYLAND · 0 upvotes · 0 comments
- [CVE-2026-44163 \(fluent-plugin-opentelemetry\): fluent-plugin-opentelemetry Has Denial of Service \(DoS\) via Large Payloads and Decompression Bombs in \`in\_opentelemetry\`](https://daily.dev/posts/cve-2026-44163-fluent-plugin-opentelemetry-fluent-plugin-opentelemetry-has-denial-of-service-dos-zfj4qyemz) · RUBYLAND · 0 upvotes · 0 comments
- [CVE-2026-44025 \(fluentd\): Fluentd is Vulnerable to Exposure of Sensitive Information via Monitor Agent API](https://daily.dev/posts/cve-2026-44025-fluentd-fluentd-is-vulnerable-to-exposure-of-sensitive-information-via-monitor-age-qaxqyqzgz) · RUBYLAND · 0 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#ruby](https://daily.dev/tags/ruby)

[View this post on daily.dev](https://daily.dev/posts/cve-2026-44160-fluentd-fluentd-is-vulnerable-to-denial-of-service-dos-via-gzip-decompression-bo-tuspibkxm)