TI-2026-20730 CVE-2026-25628 · GHSA-f632-vm87-2m2f
Qdrant affected by arbitrary file write via `/logger` endpoint
Priority HIGH 73
Qdrant is a vector similarity search engine and vector database.
Vulnerabilities
6 records
TI-2024-03573 CVE-2024-3829 · GHSA-7m75-x27w-r52r
Arbitrary File Read and Write during Snapshot Recovery in qdrant/qdrant
Priority HIGH 80
qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process.
TI-2024-03341 CVE-2024-3584 · GHSA-xcr2-h8hv-6227
Path Traversal in qdrant/qdrant
Priority HIGH 74
qdrant/qdrant version 1.9.0-dev is vulnerable to path traversal due to improper input validation in the `/collections/{name}/snapshots/upload` endpoint.
TI-2024-02062 CVE-2024-2221 · GHSA-hm95-xqg2-4w57
Path Traversal and Arbitrary File Upload Vulnerability in qdrant/qdrant
Priority HIGH 82
qdrant/qdrant is vulnerable to a path traversal and arbitrary file upload vulnerability via the `/collections/{COLLECTION}/snapshots/upload` endpoint, specifically through the `snapshot` parameter.
TI-2024-02883 CVE-2024-3078 · GHSA-5gxc-9wh2-99f9
Qdrant Full Snapshot REST API snapshots.rs path traversal
Priority MEDIUM 44
A vulnerability was found in Qdrant up to 1.6.1/1.7.4/1.8.2 and classified as critical.
TI-2023-20226 CVE-2023-38975 · GHSA-j4cw-vvxw-4jcv
* Buffer Overflow vulnerability in qdrant v.1.3.2 allows a remote attacker cause a denial…
Priority HIGH 72
* Buffer Overflow vulnerability in qdrant v.1.3.2 allows a remote attacker cause a denial of service via the chucnked_vectors.rs component.