What is the CVSS score of CVE-2026-25628?

CVE-2026-25628 has a CVSS 3.1 base score of 8.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of AI / ML are affected by CVE-2026-25628?

Qdrant vector database installations (versions 1.9.3-1.15.x) are vulnerable to arbitrary file write attacks through an exposed logging endpoint, potentially allowing attackers to corrupt critical…. A patch is available.

Is there a public PoC exploit available for CVE-2026-25628?

Yes, a public proof-of-concept exploit is available for CVE-2026-25628. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-25628?

Within 24 hours: Identify all Qdrant deployments and their versions; assess network exposure of the /logger endpoint and restrict access via firewall/WAF rules. Within 7 days: Apply vendor patch to upgrade all Qdrant instances to version 1.16.0 or later; validate patched systems in non-production first. Within 30 days: Conduct log audits for suspicious /logger endpoint activity; review file write permissions on systems hosting Qdrant; implement monitoring/alerting on the /logger endpoint.

AI / ML CVE-2026-25628

HIGH

External Control of File Name or Path (CWE-73)

2026-02-06 security-advisories@github.com

GHSA-f632-vm87-2m2f

Information Disclosure AI / ML Qdrant

8.5

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.5 HIGH

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

PoC Detected

Feb 19, 2026 - 17:45 vuln.today

Public exploit code

Patch released

Feb 19, 2026 - 17:45 nvd

Patch available

CVE Published

Feb 06, 2026 - 21:16 nvd

HIGH 8.5

DescriptionGitHub Advisory

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled on_disk.log_file path. Minimal privileges are required (read-only access). This vulnerability is fixed in 1.16.0.

AnalysisAI

Arbitrary file append vulnerability in Qdrant vector database versions 1.9.3 through 1.15.x allows authenticated users with minimal read-only privileges to write to arbitrary files through an unsanitized log file path parameter in the /logger endpoint. Public exploit code exists for this vulnerability, enabling attackers to corrupt system files or inject malicious content with high impact to confidentiality, integrity, and availability. The issue is resolved in version 1.16.0.

Technical ContextAI

Affects Qdrant. Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled on_disk.log_file path. Minimal privileges are required (read-only access). This vulnerability is fixed in 1.16.0.