chromadb
Chroma.
View on Github
Activity
- Latest release
- 4mo ago
- Total releases
- 130
- Cadence
- ~6 days
- Last 12 months
- 23
Reach
- Stars
- —
Details
- License
- Apache-2.0
- First release
- Feb 09, 2023
| Version | Released | |
|---|---|---|
1.5.9
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.5.8
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.5.7
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.5.6
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.5.5
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.5.4
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.5.3
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.5.2
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.5.1
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.5.0
minor
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.4.1
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.4.0
minor
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.3.7
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.3.6
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.3.5
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.3.4
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.3.3
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.3.2
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.3.0
minor
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.2.2
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.2.1
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.2.0
minor
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.1.1
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.1.0
minor
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.21
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.20
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.19
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.18
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.17
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.16
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.15
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.13
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.12
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.11
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.10
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.9
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.8
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.7
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.6
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.5
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.4
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.3
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.2
patch
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.0
major
4 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45829
PYSEC-2026-311
GHSA-f4j7-r4q5-qw2c
Jun 29, 2026
ChromaDB Python project has a pre-authentication code injection vulnerability
Critical
Network
Low
None
None
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint. Affected versions
1.0.0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
+ 32 more Show less
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Jul 01, 2026 · Source: OSV.dev | ||
1.0.0b0
pre
3 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev | ||
0.6.3
patch
3 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev | ||
0.6.2
patch
3 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev | ||
0.6.1
patch
3 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev | ||
0.6.0
minor
3 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev | ||
0.5.23
patch
3 CVEs
CVE-2026-45831
PYSEC-2026-3815
GHSA-xph7-9rjv-w5fr
Sep 10, 2026
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Critical
Network
Low
Low
None
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions. Affected versions
0.5.0
0.5.1
0.5.10
0.5.11
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
+ 56 more Show less
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45833
PYSEC-2026-3814
GHSA-36p7-vc44-83pf
Sep 10, 2026
ChromaDB has a code injection vulnerability
Critical
Network
Low
Low
None
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2026-45830
PYSEC-2026-3813
GHSA-2wm9-hf6c-p5cr
Sep 10, 2026
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
Network
Low
Low
None
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to. Affected versions
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.5.0
0.5.1
0.5.10
0.5.11
+ 64 more Show less
0.5.12
0.5.13
0.5.15
0.5.16
0.5.17
0.5.18
0.5.2
0.5.20
0.5.21
0.5.23
0.5.3
0.5.4
0.5.5
0.5.7
0.5.9
0.6.0
0.6.1
0.6.2
0.6.3
1.0.0
1.0.0b0
1.0.10
1.0.11
1.0.12
1.0.13
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.2.1
1.2.2
1.3.0
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.4.0
1.4.1
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
References Updated Sep 10, 2026 · Source: OSV.dev |