Max-severity flaw in ChromaDB for AI apps allows server hijacking
Max-severity ChromaDB flaw allows unauthenticated RCE via malicious model loading.
A critical vulnerability (CVE-2026-45829) in ChromaDB's Python FastAPI version allows unauthenticated attackers to execute arbitrary code by embedding malicious model settings before authentication is validated. The flaw, introduced in version 1.0.0 and affecting versions up to 1.5.8, enables attackers to force the server to load and execute malicious models from Hugging Face. Approximately 73% of internet-exposed ChromaDB instances run vulnerable versions, with maintainers unresponsive to disclosure since February.
AI summary of the linked source. Not reviewed by an editor. How this works
Run HiddenLayer?
Get an email when a new story names HiddenLayer, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-45829