---
id: CVE-2026-45833
aliases:
  - GHSA-36p7-vc44-83pf
  - PYSEC-2026-3814
title: ChromaDB has a code injection vulnerability
summary: ChromaDB has a code injection vulnerability
severity: critical
vendor: chromadb
product: chromadb
ecosystem: pip
affected:
  - 'chromadb >= 0.4.17, <= 1.5.9'
published: '2026-06-12'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T12:25:44.502926958Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-36p7-vc44-83pf'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-45833'
  - url: 'https://access.redhat.com/security/cve/CVE-2026-45833'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2488430'
  - url: 'https://github.com/chroma-core/chroma'
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45833.json
  - url: 'https://www.hiddenlayer.com/sai-security-advisory/2026-06-chromadb-5'
  - url: 'https://pypi.org/project/chromadb'
  - url: 'https://github.com/advisories/GHSA-36p7-vc44-83pf'
tags:
  - osv
  - pip
  - exploit-available
epss: 0.00342
epssPercentile: 0.27874
exploits:
  github: 1
  githubRepos:
    - 'https://github.com/e4zyy/Project-CVE-2026-45833'
  checkedAt: '2026-09-24T07:53:04.229Z'
exploitAvailable: true
ingestedAt: '2026-08-25T19:26:22.554Z'
---

## Overview

A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission.

## Affected packages

- `chromadb >= 0.4.17, <= 1.5.9`

## Remediation

Refer to the advisory for the patched release.