01os (>=0.0.5, <=0.0.13), 1claw-crewai-tools (>=0.1.0, <=0.2.0) +2063 more potentially affected by CVE-2026-45831 via chromadb (>=0.3.4, <=1.5.9)

chromadb PYPI version =0.3.4, =0.0.5, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.2.0, =0.6.4, =0.1.1, =0.0.4.dev0, =0.0.4 - adaline-crewai 0.1.0 and more Source cves: CVE-2026-45831 Source advisory: SNYK:PYTHON-CHROMADB-17337045...

CVE-2026-45831

The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions...