CVE-2026-45833

EUVD-2026-36484
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission.
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 26%
Affected Products (NVD)
VendorProductVersion
trychromachromadb
0.4.17 ≤
𝑥
≤ 1.5.9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.hiddenlayer.com/sai-security-advisory/2026-06-chromadb-5
https://access.redhat.com/security/cve/CVE-2026-45833
https://bugzilla.redhat.com/show_bug.cgi?id=2488430
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45833.json
https://www.hiddenlayer.com/sai-security-advisory/2026-06-chromadb-5