CVE-2026-45833

🗓️ 12 Jun 2026 15:16:33Reported by HiddenLayerType

cve🔗 web.nvd.nist.gov👁 31 Views🌐 WEB

Authenticated attacker can run code in ChromaDB via malicious model repository and trust_remote_code.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2026-45833	12 Jun 202618:04	–	circl
Cvelist	CVE-2026-45833	12 Jun 202615:16	–	cvelist
EUVD	EUVD-2026-36484	12 Jun 202615:16	–	euvd
NVD	CVE-2026-45833	12 Jun 202616:16	–	nvd
Positive Technologies	PT-2026-48898	12 Jun 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-45833	15 Jun 202608:35	–	redhatcve
Snyk	Arbitrary Code Injection	12 Jun 202616:39	–	snyk
vulnersOsv	01os (>=0.0.5 <=0.0.13), 1claw-crewai-tools (=0.1.0) +1776 more potentially affected by CVE-2026-45833 via chromadb (>=0.4.17 <=1.5.9)	12 Jun 202616:39	–	vulnersosv
Vulnrichment	CVE-2026-45833	12 Jun 202615:16	–	vulnrichment

NVD

Node

trychroma chromadbRange0.4.17–1.5.9python

[
  {
    "vendor": "Chroma",
    "product": "ChromaDB",
    "packageName": "chromadb",
    "repo": "https://github.com/chroma-core/chroma",
    "versions": [
      {
        "status": "affected",
        "version": "0.4.17",
        "lessThanOrEqual": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
hiddenlayer	www.hiddenlayer.com/sai-security-advisory/2026-06-chromadb-5
security	www.security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45833.json
access	www.access.redhat.com/security/cve/CVE-2026-45833
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

Parameter	Position	Path	Description	CWE
model_repository	request body	/api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id}	Code injection via authenticated user by enabling trust_remote_code and specifying a malicious model repository in the collection update endpoint.	CWE-94
trust_remote_code	request body	/api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id}	Code injection via authenticated user by enabling trust_remote_code and specifying a malicious model repository in the collection update endpoint.	CWE-94

30 Jun 2026 03:20Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5 - 8.8

CVSS 49.4

EPSS0.00342

SSVC

CWE-94