CVE-2026-25628

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...

Qdrant 安全漏洞

Qdrant is an open-source vector similarity search engine and vector database developed by Qdrant. Versions of Qdrant from 1.9.3 to 1.16.0 contained security vulnerabilities. These vulnerabilities stemmed from the /logger endpoint, which allowed arbitrary content to be appended to any file through...