CVE-2024-3829

qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlink that points to a desired file on the filesystem and arbitrary file write by including a symlink and a payload file in the snapshot's directory structure. This vulnerability allows for the reading and writing of arbitrary files on the server, which could potentially lead to a full takeover of the system. The issue is fixed in version v1.9.0.

• CWE-59

• https://github.com/qdrant/qdrant/commit/ee7a31ec3459a6a4219200234615c1817ab82260Patch
• https://huntr.com/bounties/abd9c906-75ee-4d84-b76d-ce1386401e08Exploit, Third Party Advisory
• https://github.com/qdrant/qdrant/commit/ee7a31ec3459a6a4219200234615c1817ab82260Patch
• https://huntr.com/bounties/abd9c906-75ee-4d84-b76d-ce1386401e08Exploit, Third Party Advisory

Published

Jun 3, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-38284Transmitted data is logged between the device and the backen…8.7
• CVE-2024-38285Logs storing credentials are insufficiently protected and ca…7
• CVE-2024-38286Allocation of Resources Without Limits or Throttling vulnera…7.5
• CVE-2024-38287The password-reset mechanism in the Forgot Password function…9.8
• CVE-2024-38288A command-injection issue in the Certificate Signing Request…7.2
• CVE-2024-38289A boolean-based SQL injection issue in the Virtual Meeting P…9.8
• CVE-2024-38290In XIQ-SE before 24.2.11, a server misconfiguration may allo…5.3
• CVE-2024-38291In XIQ-SE before 24.2.11, a low-privileged user may be able …8.8
• CVE-2024-38292In Extreme Networks XIQ-SE before 24.2.11, due to a missing …9.8
• CVE-2024-38293ALCASAR before 3.6.1 allows CSRF and remote code execution i…9.6
• CVE-2024-38294ALCASAR before 3.6.1 allows email_registration_back.php remo…9.8
• CVE-2024-38295ALCASAR before 3.6.1 allows still_connected.php remote code …9.8