| Component | Chroma |
| Severity | high (CVSS 8.8) |
| CVSS vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| Published (NVD) | 2026-06-12 |
| Last modified | 2026-06-17 |
| Affected versions | chromadb >= 0.5.0, <= 1.5.9 |
| Fixed in | see the vendor advisory |
| Weakness | CWE-863 |
| CISA KEV | not listed |
NVD description
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions.
What to do
- NVD lists no fixed version yet: follow the vendor advisory below and keep Chroma off the public internet until a fix ships.
- Do not expose the component's API or UI to the internet without authentication in front of it.
Sources
Read more
Other Chroma CVEs
All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the authorization layer, allowing at...
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily r...
A lack of authorization validation in version 1.0.0 or later of the ChromaDB Rust project allows any authenticated users to arbitrarily read...
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary c...
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attack...