Critical severity10.0NVD Advisory· Published May 18, 2026· Updated Jul 15, 2026
CVE-2026-45829
CVE-2026-45829
Description
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
chromadbPyPI | >= 1.0.0, <= 1.5.9 | — |
Affected products
2Patches
Vulnerability mechanics
References
7- github.com/advisories/GHSA-f4j7-r4q5-qw2cghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-45829ghsaADVISORY
- github.com/chroma-core/chroma/issues/6717nvdWEB
- www.hiddenlayer.com/research/chromatoast-served-pre-authnvdWEB
- access.redhat.com/security/cve/CVE-2026-45829nvd
- bugzilla.redhat.com/show_bug.cginvd
- security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45829.jsonnvd
News mentions
3- ⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain ChaosThe Hacker News · May 25, 2026
- Max-severity flaw in ChromaDB for AI apps allows server hijackingBleepingComputer · May 19, 2026
- Unpatched ChromaDB Vulnerability Can Lead to Server TakeoverSecurityWeek · May 19, 2026