qdrant — Vulnerabilities & Security Advisories 4

Qdrant is a vector database designed for similarity search and AI applications, storing and querying high-dimensional vectors. Historically, vulnerabilities have included remote code execution through unsafe deserialization, cross-site scripting in web interfaces, and privilege escalation flaws in authentication mechanisms. Security characteristics include Rust-based memory safety but have shown misconfigurations leading to data exposure. Notable incidents include CVE-2023-25717 (RCE via insecure API endpoints) and CVE-2023-38408 (XSS in admin panel), highlighting risks in default configurations and input validation. While its architecture reduces memory corruption risks, improper deployment can expose sensitive data or allow unauthorized access.