Chroma Chromadb vulnerabilities

• chroma chromadb, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +2 more ChromaDB has a code injection vulnerability CVE-2026-45833 Public exploit 9.4 CriticalJune 12, 2026
• chroma chromadb, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +2 more All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and... CVE-2026-45832 8.8 HighJune 12, 2026
• chroma chromadb ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to CVE-2026-45831 8.8 HighJune 12, 2026
• chroma chromadb A lack of authorization validation in version 1.0.0 or later of the ChromaDB Rust project allows... CVE-2026-8828 8.8 HighJune 12, 2026
• chroma chromadb, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +2 more ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection CVE-2026-45830 8.8 HighJune 12, 2026
• chroma chromadb, red hat enterprise linux ai (rhel ai) 3 +1 more ChromaDB Python project has a pre-authentication code injection vulnerability CVE-2026-45829 Public exploit EPSS 15.1% 10.0 CriticalMay 18, 2026