CVE-2026-45833

CVE-2026-45833

A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the …

Vulnerability class: RCE (Remote Code Execution)

Weakness classification (CWE)

References