CVE-2026-45831
2 advisories.
PyPI/chromadb CVE-2026-45831: high 8.8
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.5.0 | - | 1.5.9 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-xph7-9rjv-w5fr
- https://nvd.nist.gov/vuln/detail/CVE-2026-45831
- https://github.com/chroma-core/chroma/issues/7588
- https://github.com/chroma-core/chroma/pull/7602
- https://github.com/chroma-core/chroma
- https://www.hiddenlayer.com/sai-security-advisory/2026-06-chromadb-3
CVE-2026-45831 · published · modified · JSON
PyPI/chromadb CVE-2026-45831: high 8.8
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.5.0 | - | 1.5.9 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-3815
- https://nvd.nist.gov/vuln/detail/CVE-2026-45831
- https://github.com/chroma-core/chroma/issues/7588
- https://github.com/chroma-core/chroma/pull/7602
- https://github.com/chroma-core/chroma
- https://www.hiddenlayer.com/sai-security-advisory/2026-06-chromadb-3
- https://pypi.org/project/chromadb
- https://github.com/advisories/GHSA-xph7-9rjv-w5fr
CVE-2026-45831 · published · modified · JSON