PatchTheCVEqdrant vulnerabilities and fixes
Recent CVEs affecting qdrant, with upgrade or downgrade steps. 4 tracked.
qdrant has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-02-06. Highest priority: CVE-2024-2221 (score 64/100).
- CVE-2026-25628 HIGH 8.5 UPGRADE Qdrant is a vector similarity search engine and vector database
- CVE-2024-3829 CRITICAL 9.1 UPGRADE qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery pr
- CVE-2024-3584 HIGH 7.5 UPGRADE qdrant/qdrant version 1.9.0-dev is vulnerable to path traversal due to improper input validation in the `/coll
- CVE-2024-2221 CRITICAL 9.8 DOWNGRADE qdrant/qdrant is vulnerable to a path traversal and arbitrary file upload vulnerability via the `/collections/
FAQ
How do I fix qdrant vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is qdrant being exploited right now?
None of the tracked qdrant CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which qdrant CVE should I patch first?
CVE-2024-2221 currently ranks highest (64/100): qdrant/qdrant is vulnerable to a path traversal and arbitrary file upload vulnerability via the `/collections/.