3 matches found
EUVD-2026-36483
All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the authorization layer, allowing attackers to bypass authorization controls by using the V1 endpoints...
8.8CVSS5.8AI score0.0052EPSS
SaveExploits0References1
CVE-2026-45832
All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the authorization layer, allowing attackers to bypass authorization controls by using the V1 endpoints...
9.6CVSS5.8AI score0.0052EPSS
SaveExploits0References7
PT-2026-48897
All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the authorization layer, allowing attackers to bypass authorization controls by using the V1 endpoints...
8.8CVSS5.8AI score0.0052EPSS
SaveExploits0References2
20