CVE-2026-45831

CVE-2026-45831

The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission a…

Vulnerability class: Broken Access Control

Weakness classification (CWE)

References