CVE-2024-2221 Path Traversal and Arbitrary File Upload Vulnerability in qdrant/qdrant
Attackers can exploit path traversal in the snapshot upload endpoint to overwrite arbitrary files, potentially leading to remote code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-2221?
CVE-2024-2221 is a critical path traversal vulnerability in qdrant/qdrant, published on 10 Apr 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
qdrant/qdrant is vulnerable to a path traversal and arbitrary file upload vulnerability via the `/collections/{COLLECTION}/snapshots/upload` endpoint, specifically through the `snapshot` parameter. This vulnerability allows attackers to upload and overwrite any file on the filesystem, leading to potential remote code execution. This issue affects the integrity and availability of the system, enabling unauthorized access and potentially causing the server to malfunction.
Which versions are affected by CVE-2024-2221?
It affects 1 product.
Products include Qdrant Qdrant.
How do I fix CVE-2024-2221?
No fix has been published for CVE-2024-2221 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2024-2221 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-2221 exists.
Other vulnerabilities in qdrant/qdrant
- CVE-2024-3829 Arbitrary File Read and Write during Snapshot Recovery in qdrant/qdrant
- CVE-2024-3584 Path Traversal in qdrant/qdrant
- CVE-2026-25628 Qdrant affected by arbitrary file write via `/logger` endpoint
- CVE-2023-38975 Memory corruption in n/a
- CVE-2024-3078 Qdrant Full Snapshot REST API snapshots.rs path traversal
Sources
Also known as GHSA-hm95-xqg2-4w57.