CVE-2026-45829

🗓️ 18 May 2026 15:59:22Reported by HiddenLayerType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 48 Views🌐 WEB

Pre-authentication code injection in ChromaDB Python 1.0+ enables arbitrary code via malicious model repository when trust_remote_code is true.

Reporter	Title	Published	Views	Family All 16
GithubExploit	Exploit for CVE-2026-45829	21 May 202611:24	–	githubexploit
GithubExploit	Exploit for CVE-2026-45829	20 May 202615:31	–	githubexploit
ATTACKERKB	CVE-2026-45829	18 May 202615:59	–	attackerkb
Circl	CVE-2026-45829	19 May 202614:30	–	circl
CNNVD	chroma 代码注入漏洞	18 May 202600:00	–	cnnvd
Cvelist	CVE-2026-45829	18 May 202615:59	–	cvelist
EUVD	EUVD-2026-30779	18 May 202615:59	–	euvd
Github Security Blog	ChromaDB Python project has a pre-authentication code injection vulnerability	18 May 202618:31	–	github
NVD	CVE-2026-45829	18 May 202617:16	–	nvd
OSV	GHSA-F4J7-R4Q5-QW2C ChromaDB Python project has a pre-authentication code injection vulnerability	18 May 202618:31	–	osv

[
  {
    "vendor": "Chroma",
    "product": "ChromaDB",
    "packageName": "chromadb",
    "repo": "https://github.com/chroma-core/chroma",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.0",
        "lessThanOrEqual": "*",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
hiddenlayer	www.hiddenlayer.com/research/chromatoast-served-pre-auth
github	www.github.com/chroma-core/chroma/issues/6717

Parameter	Position	Path	Description	CWE
embedding_function	request body	api/v2/tenants/{tenant}/databases/{db}/collections	Pre-authentication code execution vulnerability via embedding_function configuration during collection creation	CWE-94
model_name	request body	api/v2/tenants/{tenant}/databases/{db}/collections	Pre-authentication code execution vulnerability via embedding_function configuration during collection creation	CWE-94
trust_remote_code	request body	api/v2/tenants/{tenant}/databases/{db}/collections	Pre-authentication code execution vulnerability via embedding_function configuration during collection creation	CWE-94

17 Jun 2026 10:52Current

6.1Medium risk

Vulners AI Score6.1

CVSS 410

EPSS0.09665

SSVC

CWE-94