Trychroma Chromadb
4 CVEs affecting Trychroma Chromadb. Latest disclosed: 2026-06-12. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-45833 | High | 8.8 | 2026-06-12 | A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server b… |
CVE-2026-45832 | High | 8.8 | 2026-06-12 | All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the authorization layer, allowing attackers to bypass a… |
CVE-2026-45831 | High | 8.8 | 2026-06-12 | The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given per… |
CVE-2026-45830 | High | 8.8 | 2026-06-12 | A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update… |