Exploit for CVE-2026-45829

FULL-A...

1claw-crewai-tools (>=0.1.0, <=0.3.4), 4dpocket (>=0.1.3, <=0.1.4) +1928 more potentially affected by CVE-2026-45829 via chromadb (>=1.0.6, <=1.5.9)

chromadb PYPI version =1.0.6, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.2.0, =0.6.4, =0.1.1, =0.0.4.dev0, =0.0.4 - adaline-crewai 0.1.0 - adam-thinking 1.0.0 and more Source cves: CVE-2026-45829 Source advisory: OSV:GHSA-F4J7-R4Q5-QW2C...

1claw-crewai-tools (>=0.1.0, <=0.3.4), 4dpocket (>=0.1.3, <=0.1.4) +1928 more potentially affected by CVE-2026-45829 via chromadb (>=1.0.6, <=1.5.9)

chromadb PYPI version =1.0.6, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.2.0, =0.6.4, =0.1.1, =0.0.4.dev0, =0.0.4 - adaline-crewai 0.1.0 - adam-thinking 1.0.0 and more Source cves: CVE-2026-45829 Source advisory: GHSA-F4J7-R4Q5-QW2C...

CVE-2026-45829

A flaw was found in the ChromaDB Python project. This pre-authentication code injection vulnerability allows an unauthenticated attacker to execute arbitrary code on the server. The attacker can achieve this by sending a malicious model repository to the...

CVE-2026-45829

A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trustremotecode set to true in...