{"data":{"id":"d7b6b2f0-5a6c-4b7e-addf-ae0732a7c0e4","title":"CVE-2024-3829: qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process…","summary":"qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during snapshot recovery. An attacker can manipulate snapshot files to include symlinks, which enables reading any file on the filesystem and writing files by placing a symlink and payload file in the snapshot's directory structure. The source says this could lead to a full takeover of the system.","solution":"Fixed in v1.9.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-3829","publishedAt":"2024-06-03T14:15:14.267Z","cveId":"CVE-2024-3829","cweIds":["CWE-59"],"cvssScore":"9.1","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["qdrant-client@< 1.9.0 (fixed: 1.9.0)"],"affectedPackageNames":["qdrant-client"],"affectedPackageRefs":["pypi:qdrant-client"],"affectedVendors":[],"affectedVendorsRaw":["Qdrant"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"qdrant arbitrary file read and write during snapshot recovery","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00909,"epssCheckedAt":"2026-11-04T18:09:13.788Z","kevDateAdded":null,"advisoryAliases":["GHSA-7m75-x27w-r52r"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:55:57.621Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2024-04-22T13:35:46.810Z","daysToFix":-42,"fixCheckedAt":"2026-10-29T21:45:55.530Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"rag","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"qdrant-client","fixedVersion":"1.9.0","matchedVersion":"1.9.0","fixReleasedAt":"2024-04-22T13:35:46.810Z","daysToFix":-42,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:45:55.379Z"}]}}