by Kastro
Paper/Archive/CVE-2026-45829

CVE-2026-45829

Chroma ChromaDB — A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated att…

EPSS 15%public exploitCVSS 10.0
critical.is priorityof 100
59
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 96.7.967 × 2019.3Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint.

Affected

ProductAffectedFixed inSource
ChromaDB1.0.0 – *–CNA
Red Hat Enterprise Linux AI (RHEL AI) 3see advisory–redhat-SADP
Red Hat Enterprise Linux AI (RHEL AI) 3see advisory–redhat-SADP
Red Hat Enterprise Linux AI (RHEL AI) 3see advisory–redhat-SADP
Red Hat Enterprise Linux AI (RHEL AI) 3see advisory–redhat-SADP

Scores by source

HiddenLayer (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
redhat-SADP (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploithiddenlayer.com/research/chromatoast-served-pre-authrefgithub.com/chroma-core/chroma/issues/6717refaccess.redhat.com/security/cve/CVE-2026-45829refbugzilla.redhat.com/show_bug.cgi?id=2479623refsecurity.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45829.json