Beveiligingsadvies

CVE-2026-45833

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-12 15:16:33

Laatst bijgewerkt 2026-07-31 12:04:48

Toegewezen door HiddenLayer

CVSS-score 9.4

Status PUBLISHED

Beschrijving

A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission.

← Alle CVE's bekijken Bekijk op cve.org ↗