ChromaGHSA-f4j7-r4q5-qw2c
ChromaDB Python project has a pre-authentication code injection vulnerability
CriticalCVE-2026-45829 · Published May 18, 2026 · updated Jun 29, 2026
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| chromadb PyPI | >= 1.0.0, <= 1.5.9 | No fix yet |
Details and references
- CVSS 4.0
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-94
- Also known as
- CVE-2026-45829, PYSEC-2026-311
More Chroma advisories
All Chroma| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jun 12 | Chroma: improper authorization High8.8Jun 12 | High8.8 | No fix yet |
| Jun 12 | ChromaDB has a code injection vulnerabilityCriticalJun 12 | Critical | No fix yet |
| Jun 12 | Chroma: insecure direct object referenceHigh8.8Jun 12 | High8.8 | No fix yet |