CVE-2026-32829 vulnerabilities

Vulnerabilities for packages: qdrant, py3-xet-core, vector, parseable...

GHSA-VVP9-7P8X-RFVV vulnerabilities

Vulnerabilities for packages: qdrant, py3-xet-core, vector, parseable...

GHSA-VVP9-7P8X-RFVV vulnerabilities

Vulnerabilities for packages: vector, parseable, py3-xet-core, garage, qdrant...

GHSA-6XVM-J4WR-6V98 vulnerabilities

Vulnerabilities for packages: cargo-audit, zed, sccache, parseable, pixi, qdrant, lychee, py3-xet-core, zizmor, xh, vector, zola, uv, wash, samply, berg, wadm, wasmcloud, nushell...

CVE-2026-31812 vulnerabilities

Vulnerabilities for packages: cargo-audit, zed, sccache, parseable, pixi, qdrant, lychee, py3-xet-core, zizmor, xh, vector, zola, uv, wash, samply, berg, wadm, wasmcloud, nushell...

GHSA-6XVM-J4WR-6V98 vulnerabilities

Vulnerabilities for packages: fnm, wasmcloud, xh, zizmor, wadm, lychee, py3-xet-core, garage, apollo-router, qdrant, uv, zola, sccache, cargo-audit, pixi, vector, zed, asciinema, samply, nushell, berg, parseable, komodo, wash...

CVE-2026-31812 vulnerabilities

Vulnerabilities for packages: fnm, wasmcloud, xh, zizmor, wadm, lychee, py3-xet-core, garage, apollo-router, qdrant, uv, zola, sccache, cargo-audit, pixi, vector, zed, asciinema, samply, nushell, berg, parseable, komodo, wash...

GHSA-8V2V-WJWG-VX6R vulnerabilities

Vulnerabilities for packages: qdrant...

GHSA-GCQF-3G44-VC9P vulnerabilities

Vulnerabilities for packages: qdrant...

GHSA-GCQF-3G44-VC9P vulnerabilities

Vulnerabilities for packages: qdrant...

GHSA-8V2V-WJWG-VX6R vulnerabilities

Vulnerabilities for packages: qdrant...

CVE-2026-25628

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...

CVE-2026-25628

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...

CVE-2026-25628

CVE-2026-25628 affects Qdrant vector search engine from versions 1.9.3 up to (but not including) 1.16.0. The issue allows an attacker with minimal read-only privileges to write to arbitrary files via the /logger endpoint by supplying an attacker-controlled on_disk.log_file path, enabling potentia...

CVE-2026-25628

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...

CVE-2026-25628 Qdrant affected by arbitrary file write via `/logger` endpoint

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...

EUVD-2026-5567

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...

CVE-2026-25628 Qdrant affected by arbitrary file write via `/logger` endpoint

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...

CVE-2026-25628 Qdrant affected by arbitrary file write via `/logger` endpoint

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...

CVE-2026-25628: External Control of File Name or Path

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...