Skip to content
Chroma vulnerabilities
Newest
-
chroma chromadb, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +2 more
ChromaDB has a code injection vulnerability
CVE-2026-45833
Public exploit
9.4 Critical
-
chroma chromadb, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +2 more
All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and...
CVE-2026-45832
8.8 High
-
chroma chromadb
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
CVE-2026-45831
8.8 High
-
chroma chromadb
A lack of authorization validation in version 1.0.0 or later of the ChromaDB Rust project allows...
CVE-2026-8828
8.8 High
-
chroma chromadb, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +2 more
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
CVE-2026-45830
8.8 High
-
chroma chromadb, red hat enterprise linux ai (rhel ai) 3 +1 more
ChromaDB Python project has a pre-authentication code injection vulnerability
CVE-2026-45829
Public exploit
EPSS 15.1%
10.0 Critical