Vulnerability · Published Jun 12, 2026 · Assigned by HiddenLayer

CVE-2026-45833

High 7.5

In plain English

A high-severity code injection in ChromaDB from Chroma. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.3%top 72.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack tooling1Public PoC

Official description

A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	chromadb	no fix listed	GHSA-36p7-vc44-83pf
PyPI	chromadb	no fix listed	PYSEC-2026-3814

Affected products (as reported)

Vendor	Product	Versions
Chroma	ChromaDB	0.4.17 – through *

Weakness: CWE-94 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://www.hiddenlayer.com/sai-security-advisory/2026-06-chromadb-5
https://access.redhat.com/security/cve/CVE-2026-45833 vdb-entry, x_refsource_REDHAT
RHBZ#2488430 issue-tracking, x_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45833.json x_sadp-csaf-vex