Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Qdrant

First CVE: Aug 29, 2023Active for: 3 yearsTotal CVEs: 6

Qdrant is a specialized vector database designed for similarity search and AI workloads, presenting a narrowly scoped but architecturally critical product in modern machine-learning infrastructure. Vulnerabilities affecting the vendor skew strongly toward critical severity and recur through pathway-control and input-validation weaknesses including path traversal, buffer overflows, and improper file-handling that are characteristic of systems ingesting untrusted query and data inputs at scale. Defenders should treat this vendor's security advisories as high-priority for any deployment serving AI or embeddings pipelines; live severity and exploitation metrics are shown alongside this summary.

FAUCET AI Generated
6
Total CVEs
More Total CVEs than 86% of tracked vendors
2.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 80% of tracked vendors
8.8
Avg CVSS Score
Higher Avg CVSS Score than 84% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Qdrant over time

Volume of CVEsAvg CVSS Base Score
First CVE
Aug 29, 2023
2 years ago
Most Recent CVE
Feb 6, 2026
168 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (6 CVEs).

6 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2026-25628HIGH
Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-con
Feb 6, 20268.828NONO
CVE-2024-3078CRITICAL
A vulnerability was found in Qdrant up to 1.6.1/1.7.4/1.8.2 and classified as critical. This issue affects some unknown processing of the file lib/collection/src/collection/snapsho
Mar 29, 20249.827NONO
CVE-2024-3829CRITICAL
qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapsh
Jun 3, 20249.126NONO
CVE-2024-2221CRITICAL
qdrant/qdrant is vulnerable to a path traversal and arbitrary file upload vulnerability via the `/collections/{COLLECTION}/snapshots/upload` endpoint, specifically through the `sna
Apr 10, 20249.826NONO
CVE-2024-3584HIGH
qdrant/qdrant version 1.9.0-dev is vulnerable to path traversal due to improper input validation in the `/collections/{name}/snapshots/upload` endpoint. By manipulating the `name`
May 30, 20247.523NONO
CVE-2023-38975HIGH
* Buffer Overflow vulnerability in qdrant v.1.3.2 allows a remote attacker cause a denial of service via the chucnked_vectors.rs component.
Aug 29, 20237.521NONO
View all 6 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products6 CVEs
50%
50%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
HighCritical
Attack Vector
Local0 (0.0%)
Network6 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low6 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None6 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low1 (16.7%)
High0 (0.0%)
None5 (83.3%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (6 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Qdrant.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Qdrant — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Qdrant's Products

View all 4 CNAs →

Top CWEs