High severity8.8NVD Advisory· Published Jun 12, 2026· Updated Jun 16, 2026
CVE-2026-45832
CVE-2026-45832
Description
All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the authorization layer, allowing attackers to bypass authorization controls by using the V1 endpoints.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Package: https://pypi.org/project/chromadb
Patches
Vulnerability mechanics
References
1- www.hiddenlayer.com/sai-security-advisory/2026-06-chromadb-4nvdThird Party Advisory
News mentions
0No linked articles in our index yet.