Code injection in ChromaDB
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Will not fix Red Hat: no fix planned
Attack profile from CVSS 4.0 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-94.
Summary
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Chroma | ChromaDB | 0.4.17 and later | — | No fix listed | CNA |
| — | chromadb (PyPI) | 0.4.17 – 1.5.9 | — | No fix listed | GHSA-36p7-vc44-83pf |
- ChromaDB VendorChroma Affected 0.4.17 and later Fixed in — No fix listed CNA
- chromadb (PyPI) Vendor— Affected 0.4.17 – 1.5.9 Fixed in — No fix listed GHSA-36p7-vc44-83pf
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Affected | No fix planned: Will not fix |
Not affected: 1 product
- Red Hat OpenShift AI (RHOAI)
Timeline
- 2026-10-02 Threatist record created from CVE-2026-45833
- 2026-10-03 Alias added: GHSA-36p7-vc44-83pf
References
Advisory 2
More Chromadb vulnerabilities
- TI-2026-33557 Authorization bypass in ChromaDB CVSS 4.0HIGH 8.8
- TI-2026-33556 Incorrect authorization in ChromaDB CVSS 4.0HIGH 8.8
- TI-2026-33555 Authorization bypass in ChromaDB CVSS 4.0HIGH 8.8
Sources
- CVE-2026-45833 · CVE Program
- CVE-2026-45833 · NVD
- FIRST EPSS
- GHSA-36p7-vc44-83pf · GitHub Advisory Database · CC BY 4.0
- CVE-2026-45833 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences