Response to CVE-2024-2221: Arbitrary file upload vulnerability - Qdrant

What this post added

This post details the response to CVE-2024-2221, an arbitrary file upload vulnerability. The fix involves restricting file uploads to a dedicated folder in versions v1.9.0 and above. It also notes that Qdrant cloud deployments were not materially affected due to read-only filesystems and default authentication. The post advises users to upgrade to v1.9.0 or above and provides instructions for different installation methods (container, binary, helm chart, cloud). An update on 2024-05-10 encourages upgrading to 1.9.0 to address both CVE-2024-2221 and CVE-2024-3829.