EXPOSURE Qdrant
SEVERITY CRITICAL
PROBE GET :6333/collections
Is your Qdrant exposed?
No auth by default: embeddings readable, poisonable, deletable; often holds agent memory (ASI06).
Scan a host you own → Fix card Census
Why it matters
Your vector database answers anyone on the internet. Every embedding you stored can be read, poisoned, modified or deleted. RAG and agent-memory stores often hold document text and long-term agent state (OWASP ASI06). Qdrant ships with no authentication by default, so this is a configuration choice, not a bug.
How common is it?
2,605 Qdrant instances are reachable in the Shodan index. Fingerprint match, not a verified zero-auth count · src: Shodan count · `http.html:"qdrant - vector search engine"` · 2026-08
Counts are population-level, from third-party indexes and my own honeypots. I never scan the internet and this page makes no claim about any specific host.
Fix it
The full walkthrough lives on the fix card, kept current in one place: