{"action":"Upgrade qdrant to 1.15.6 or later.","affected":[{"fixed":"1.15.6","introduced":"1.9.3"}],"component":"qdrant","cve_ids":["CVE-2026-25628"],"ecosystem":"crates.io","epss":0.00551,"exploited":false,"fixed_versions":["1.15.6"],"ghsa_id":"GHSA-f632-vm87-2m2f","id":"tcs_01M5KEX6PWXCC1VK4GGSK9HTMM","modified_at":"2026-02-06T22:21:45.693899Z","published_at":"2026-02-05T21:22:50Z","references":["https://osv.dev/vulnerability/GHSA-f632-vm87-2m2f","https://github.com/qdrant/qdrant/security/advisories/GHSA-f632-vm87-2m2f","https://nvd.nist.gov/vuln/detail/CVE-2026-25628","https://github.com/qdrant/qdrant/commit/32b7fdfb7f542624ecd1f7c8d3e2b13c4e36a2c1","https://github.com/qdrant/qdrant","https://github.com/qdrant/qdrant/blob/48203e414e4e7f639a6d394fb6e4df695f808e51/src/actix/api/service_api.rs#L195"],"severity":{"label":"high","score":8.5},"sources":[{"source":"osv","source_id":"GHSA-f632-vm87-2m2f","url":"https://osv.dev/vulnerability/GHSA-f632-vm87-2m2f"}],"summary":"qdrant has arbitrary file write via `/logger` endpoint"}