qdrant

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

qdrant records in CISA KEV

No qdrant vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Qdrant 6 records HIGH

Records

6 records in Qdrant · all components

TI-2024-02062 CVE-2024-2221 · GHSA-hm95-xqg2-4w57

Path Traversal and Arbitrary File Upload Vulnerability in qdrant/qdrant

HIGH 82

qdrant/qdrant is vulnerable to a path traversal and arbitrary file upload vulnerability via the `/collections/{COLLECTION}/snapshots/upload` endpoint, specifically through the `snapshot` parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01845 Published 2024-04-10 Fixed in 1.8.0 CWE-434

TI-2024-03573 CVE-2024-3829 · GHSA-7m75-x27w-r52r

Arbitrary File Read and Write during Snapshot Recovery in qdrant/qdrant

HIGH 80

qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00909 Published 2024-06-03 Fixed in v1.9.0, 1.9.0 CWE-59

TI-2024-03341 CVE-2024-3584 · GHSA-xcr2-h8hv-6227

Path Traversal in qdrant/qdrant

HIGH 74

qdrant/qdrant version 1.9.0-dev is vulnerable to path traversal due to improper input validation in the `/collections/{name}/snapshots/upload` endpoint.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00548 Published 2024-05-30 Fixed in v1.9.0, 1.9.0 CWE-20

TI-2026-20730 CVE-2026-25628 · GHSA-f632-vm87-2m2f

Qdrant affected by arbitrary file write via `/logger` endpoint

HIGH 73

Qdrant is a vector similarity search engine and vector database.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00543 Published 2026-02-06 Fixed in 1.16.0, 1.15.6 CWE-73

TI-2023-20226 CVE-2023-38975 · GHSA-j4cw-vvxw-4jcv

* Buffer Overflow vulnerability in qdrant v.1.3.2 allows a remote attacker cause a denial…

HIGH 72

* Buffer Overflow vulnerability in qdrant v.1.3.2 allows a remote attacker cause a denial of service via the chucnked_vectors.rs component.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01073 Published 2023-08-29 No fix listed CWE-120

TI-2024-02883 CVE-2024-3078 · GHSA-5gxc-9wh2-99f9

Qdrant Full Snapshot REST API snapshots.rs path traversal

MEDIUM 44

A vulnerability was found in Qdrant up to 1.6.1/1.7.4/1.8.2 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00874 Published 2024-03-29 No fix listed CWE-22

Open these records in search →

Critical	3
High	3
Medium	0
Low	0
No CVSS	0