Chroma vulnerabilities
6 published CVEs name Chroma among the affected products.
- Published CVEs
- 6
- Last 12 months
- 6
- Critical
- 2
- Known exploited
- 0
Critical 2High 4Medium 0Low 0Not scored 0
Newest CVEs
- CVE-2026-45833
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server…
Chroma · ChromaDB
Critical9.4 - CVE-2026-45832
All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the authorization layer, allowing attackers to bypass…
Chroma · ChromaDB
High8.8 - CVE-2026-45831
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given…
Chroma · ChromaDB
High8.8 - CVE-2026-8828
A lack of authorization validation in version 1.0.0 or later of the ChromaDB Rust project allows any authenticated users to arbitrarily read, write, update, or…
Chroma · ChromaDB
High8.8 - CVE-2026-45830
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update,…
Chroma · ChromaDB
High8.8 - CVE-2026-45829
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary…
Chroma · ChromaDB
Critical10.0