CH
Product
ChromaDB
6
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 0Low 0
Watch
Add ChromaDB to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-45833 | 8.8 | Jun 12 | A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a… Affected: 0.4.17 |
| CVE-2026-45832 | 8.8 | Jun 12 | All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the authorization layer, allowing attackers to bypass authorization… Affected: 0.5.0 |
| CVE-2026-45831 | 8.8 | Jun 12 | The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never… Affected: 0.5.0 |
| CVE-2026-8828 | 8.8 | Jun 12 | A lack of authorization validation in version 1.0.0 or later of the ChromaDB Rust project allows any authenticated users to arbitrarily read, write, update, or delete data in any… Affected: 1.0.0 |
| CVE-2026-45830 | 8.8 | Jun 12 | A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in… Affected: 0.4.17 |
Showing 5