Hi there,
Seems that the flashlog read processes a log entry from flash using nrf_log_std/hexdump_entry_process, which does take care of the formatting string in the entry, and provides a ready to print buffer... but then it is passed to cli_tx (as part of m_fprintf_ctx), which does pass the buffer to nrd_cli_fprintf as a format string, which seems worng, as the string has already been processed as a format string, and any % resulting from a %% in the original format string (or from %c or %s), will be reinterpreted as a format specifier.