Skip to content
Trychroma vulnerabilities
Newest
-
chroma chromadb, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +2 more
ChromaDB has a code injection vulnerability
CVE-2026-45833
Public exploit
9.4 Critical
-
chroma chromadb, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +2 more
All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and...
CVE-2026-45832
8.8 High
-
chroma chromadb
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
CVE-2026-45831
8.8 High
-
chroma chromadb, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +2 more
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
CVE-2026-45830
8.8 High