Chroma-Core Chroma
2 CVEs affecting Chroma-Core Chroma. Latest disclosed: 2026-09-16. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-92782 | High | 8.1 | 2026-09-16 | Chroma through 1.5.9 fails to validate tenant and database segments when resolving collections, allowing authenticated attackers to access collections from oth… |
CVE-2026-85664 | High | 7.5 | 2026-09-04 | Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters max_neighbors, ef_construction, and ef_search in collection-create requests. Unauthentic… |