Qdrant
Records
7
Disclosed CVEs
7
Exploited (sev 3–4)
0
CISA KEV flagged
0
Newest record 2026-02-06 · 7 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Patch now: confirmed exploitation or KEV · 0
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
No record for Qdrant has confirmed exploitation or a KEV flag.
Disclosures by month · last 24 months
██
Nov ’242 disclosed · peak 1 in Jan ’26Oct ’26
Disclosed CVEs, no confirmed exploitation · 7
- 2026-02-06CVE-2026-25628CVE-2026-25628: Qdrant Arbitrary File Append Vulnerability2 Disclosedqdrant · vector-database
- 2026-01-27CVE-2026-24477CVE-2026-24477: AnythingLLM API Key Exposure Vulnerability2 Disclosedanythingllm · qdrant · api-key-leak
- 2024-06-03CVE-2024-3829CVE-2024-3829: Input validation failure in Qdrant snapshot recovery2 Disclosedarbitrary-file-read · qdrant
- 2024-05-30CVE-2024-3584CVE-2024-3584: Qdrant Vector Database Path Traversal Vulnerability2 Disclosedinfra_vuln
- 2024-04-10CVE-2024-2221CVE-2024-2221: Qdrant Path Traversal and Arbitrary File Upload2 Disclosedpath-traversal · arbitrary-file-upload · rce
- 2024-03-29
- 2023-08-29CVE-2023-38975CVE-2023-38975: Qdrant Buffer Overflow Vulnerability2 Disclosedqdrant · buffer-overflow
This page lists what has been reported, not what to do about it. Versions and fixes are in each linked advisory; check the vendor’s own advisory before acting.