Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.4
CVE-2026-45833: ChromaDB lets authorized users execute any code
CVE-2026-45833 · published 4 months ago
Summary
If you are using the ChromaDB Python library version 0.4.17 or newer, a user who can log in and has permission to change a collection can upload a specially crafted model and tell the system to trust it. The system will then run whatever code that model contains, letting the user take control of the server or access data. Limit who can update collections, avoid enabling the “trust remote code” option, and upgrade to a version where this behavior is corrected as soon as possible.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | trychroma | chromadb |
>= 0.4.17, <= 1.5.9 cpe:2.3:a:trychroma:chromadb:*:*:*:*:*:python:*:* |
| pip | jeff huber | chromadb | >= 0.4.17, <= 1.5.9 |
| PyPI | – | chromadb | >= 0.4.17, <= 1.5.9 |
Original advisory text
ChromaDB has a code injection vulnerability
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission.
References
- https://www.hiddenlayer.com/sai-security-advisory/2026-06-chromadb-5 Third Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-45833
- https://access.redhat.com/security/cve/CVE-2026-45833
- https://bugzilla.redhat.com/show_bug.cgi?id=2488430
- https://github.com/chroma-core/chroma Product
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45833... Vendor Advisory
- https://pypi.org/project/chromadb Product
- https://github.com/advisories/GHSA-36p7-vc44-83pf
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45833.json
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-94Code Injection
Timeline
Published12 Jun 2026
Updated11 Oct 2026
First seen12 Jun 2026
Track software like this
Free during beta