Qdrant

6 CVEs across 2 Qdrant products. Browse Qdrant vulnerabilities, severities, and proof-of-concept exploits.

Qdrant products with known CVEs

ProductCVEs
Qdrant6
Qdrant/qdrant3
Qdrant CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-25628High8.52026-02-06Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint…
CVE-2024-3829Critical9.12024-06-03qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability b…
CVE-2024-3584High7.52024-05-30qdrant/qdrant version 1.9.0-dev is vulnerable to path traversal due to improper input validation in the `/collections/{name}/snapshots/upload` endpoint. By man…
CVE-2024-2221Critical9.82024-04-10qdrant/qdrant is vulnerable to a path traversal and arbitrary file upload vulnerability via the `/collections/{COLLECTION}/snapshots/upload` endpoint, specific…
CVE-2024-3078Medium5.52024-03-29A vulnerability was found in Qdrant up to 1.6.1/1.7.4/1.8.2 and classified as critical. This issue affects some unknown processing of the file lib/collection/s…
CVE-2023-38975High7.52023-08-29* Buffer Overflow vulnerability in qdrant v.1.3.2 allows a remote attacker cause a denial of service via the chucnked_vectors.rs component.