CVE-2026-45833: Code Injection
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trustremotecode set to true in the /api/v2/tenants/defaulttenant/databases/defaultdatabase/collections/{collectionid} if they have the UPDATECOLLECTION permission.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Set trust_remote_code to false when sending requests to /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} to prevent authenticated code injection via a malicious model repository.
ChromaDB Python API endpoint /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} trust_remote_code = false
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45833?
CVE-2026-45833 has a critical severity rating of 9.4.
How do I fix CVE-2026-45833?
To fix CVE-2026-45833, update to the latest version of the ChromaDB Python project that addresses this vulnerability.
What type of vulnerability is CVE-2026-45833?
CVE-2026-45833 is a code injection vulnerability.
Who is affected by CVE-2026-45833?
CVE-2026-45833 affects users of ChromaDB version 0.4.17 or later who allow trust_remote_code.
What can an attacker do with CVE-2026-45833?
An authenticated attacker can run arbitrary code on the server using CVE-2026-45833.