CVE-2026-25628
1 advisory.
crates.io/qdrant CVE-2026-25628: high 8.5, EPSS 0.69%
qdrant has arbitrary file write via `/logger` endpoint
Action: Upgrade qdrant to 1.15.6 or later.
cargo update -p qdrant --precise 1.15.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.9.3 | 1.15.6 | - |
Fixed versions
| 1.15.6 |
Sources
- osv: GHSA-f632-vm87-2m2f
- https://github.com/qdrant/qdrant/security/advisories/GHSA-f632-vm87-2m2f
- https://nvd.nist.gov/vuln/detail/CVE-2026-25628
- https://github.com/qdrant/qdrant/commit/32b7fdfb7f542624ecd1f7c8d3e2b13c4e36a2c1
- https://github.com/qdrant/qdrant
- https://github.com/qdrant/qdrant/blob/48203e414e4e7f639a6d394fb6e4df695f808e51/src/actix/api/service_api.rs#L195
CVE-2026-25628 · published · modified · JSON