CVE-2026-45829: Code Injection
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trustremotecode set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Prevent pre-authentication arbitrary code execution by ensuring trust_remote_code is not set to true for requests to /api/v2/tenants/{tenant}/databases/{db}/collections (reject/override requests where trust_remote_code=true).
ChromaDB Python (collections endpoint) trust_remote_code = false
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45829?
CVE-2026-45829 is considered a critical vulnerability due to its ability to allow unauthenticated attackers to execute arbitrary code.
How do I fix CVE-2026-45829?
To mitigate CVE-2026-45829, upgrade the ChromaDB Python project to a version earlier than 1.0.0 or ensure that trust_remote_code is set to false.
What versions of ChromaDB are affected by CVE-2026-45829?
CVE-2026-45829 affects ChromaDB versions 1.0.0 and later.
What types of attacks are possible using CVE-2026-45829?
An attacker can exploit CVE-2026-45829 to perform code injection, leading to the execution of arbitrary code on the server.
Is authentication required to exploit CVE-2026-45829?
No, CVE-2026-45829 can be exploited by unauthenticated users, making it particularly dangerous.