CVE-2026-32829 vulnerabilities

Vulnerabilities for packages: qdrant, py3-xet-core, vector, parseable...

GHSA-VVP9-7P8X-RFVV vulnerabilities

Vulnerabilities for packages: qdrant, py3-xet-core, vector, parseable...

GHSA-VVP9-7P8X-RFVV vulnerabilities

Vulnerabilities for packages: qdrant, py3-xet-core, vector, garage, parseable...

CVE-2026-31812 vulnerabilities

Vulnerabilities for packages: wasmcloud, sccache, pixi, uv, xh, py3-xet-core, lychee, wadm, cargo-audit, qdrant, zizmor, nushell, wash, berg, zed, vector, parseable, samply, zola...

GHSA-6XVM-J4WR-6V98 vulnerabilities

Vulnerabilities for packages: wasmcloud, sccache, pixi, uv, xh, py3-xet-core, lychee, wadm, cargo-audit, qdrant, zizmor, nushell, wash, berg, zed, vector, parseable, samply, zola...

CVE-2026-31812 vulnerabilities

Vulnerabilities for packages: uv, zola, garage, sccache, wash, asciinema, nushell, apollo-router, komodo, wadm, samply, berg, qdrant, py3-xet-core, xh, lychee, fnm, vector, wasmcloud, zizmor, zed, cargo-audit, pixi, parseable...

GHSA-6XVM-J4WR-6V98 vulnerabilities

Vulnerabilities for packages: uv, zola, garage, sccache, wash, asciinema, nushell, apollo-router, komodo, wadm, samply, berg, qdrant, py3-xet-core, xh, lychee, fnm, vector, wasmcloud, zizmor, zed, cargo-audit, pixi, parseable...

GHSA-8V2V-WJWG-VX6R vulnerabilities

Vulnerabilities for packages: qdrant...

GHSA-GCQF-3G44-VC9P vulnerabilities

Vulnerabilities for packages: qdrant...

GHSA-GCQF-3G44-VC9P vulnerabilities

Vulnerabilities for packages: qdrant...

GHSA-8V2V-WJWG-VX6R vulnerabilities

Vulnerabilities for packages: qdrant...

CVE-2026-25628

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...

CVE-2026-25628

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...

CVE-2026-25628

CVE-2026-25628 affects Qdrant vector search engine from versions 1.9.3 up to (but not including) 1.16.0. The issue allows an attacker with minimal read-only privileges to write to arbitrary files via the /logger endpoint by supplying an attacker-controlled on_disk.log_file path, enabling potentia...

CVE-2026-25628

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...

CVE-2026-25628 Qdrant affected by arbitrary file write via `/logger` endpoint

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...

EUVD-2026-5567

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...

CVE-2026-25628 Qdrant affected by arbitrary file write via `/logger` endpoint

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...

CVE-2026-25628 Qdrant affected by arbitrary file write via `/logger` endpoint

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...

Qdrant 安全漏洞

Qdrant is an open-source vector similarity search engine and vector database developed by Qdrant. Versions of Qdrant from 1.9.3 to 1.16.0 contained security vulnerabilities. These vulnerabilities stemmed from the /logger endpoint, which allowed arbitrary content to be appended to any file through...