CVE-2024-2221: Path Traversal and Arbitrary File Upload Vulnerability in qdrant/qdrant

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-04-10 · updated 2026-06-17
Weakness: CWE-434

Description

qdrant/qdrant is vulnerable to a path traversal and arbitrary file upload vulnerability via the `/collections/{COLLECTION}/snapshots/upload` endpoint, specifically through the `snapshot` parameter. This vulnerability allows attackers to upload and overwrite any file on the filesystem, leading to potential remote code execution. This issue affects the integrity and availability of the system, enabling unauthorized access and potentially causing the server to malfunction.

Affected products

qdrant/qdrant: 1.7.4

References

https://github.com/qdrant/qdrant/commit/e6411907f0ecf3c2f8ba44ab704b9e4597d9705d
https://huntr.com/bounties/6be8d4e3-67e6-4660-a8db-04215a1cff3e
https://github.com/qdrant/qdrant/commit/e6411907f0ecf3c2f8ba44ab704b9e4597d9705d
https://huntr.com/bounties/6be8d4e3-67e6-4660-a8db-04215a1cff3e

Get alerted when CVE-2024-2221 or the next vulnerability affects your stack