CVE-2024-3829

CVE-2024-3829 is a critical arbitrary file read and write vulnerability affecting qdrant/qdrant version 1.9.0-dev. Attackers can exploit this by manipulating snapshot files with symlinks during the recovery process, enabling unauthorized access to read and write arbitrary files on the server. With a CVSS score of 9.1 (CRITICAL), this vulnerability has a network attack vector, low attack complexity, and high impact on confidentiality and integrity, potentially leading to full system compromise. There is no evidence of active exploitation, nor are there public Metasploit or Nuclei exploits, though it has garnered some community discussion and media coverage.