---
id: CVE-2026-92782
title: >-
  Chroma through 1.5.9 fails to validate tenant and database segments when
  resolving collections, allowing authenticated attackers to access collections
  from other tenants by knowing the collection identifier
summary: >-
  Chroma through 1.5.9 fails to validate tenant and database segments when
  resolving collections, allowing authenticated attackers to access collections
  from other tenants by knowing the collection identifier. Attackers can read,
  modify, a…
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N'
cwe:
  - CWE-863
vendor: chroma-core
product: chroma
affected:
  - chroma <= 1.5.9
published: '2026-09-16'
updated: '2026-09-24'
sourceUpdated: '2026-09-24T21:00:46.893'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-92782'
references:
  - url: 'https://github.com/chroma-core/chroma'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/chroma-core/chroma/blob/1.5.9/rust/frontend/src/get_collection_with_segments_provider.rs#L143-L160
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/chroma-core/chroma/blob/1.5.9/rust/frontend/src/server.rs#L469-L487
    label: disclosure@vulncheck.com
  - url: 'https://github.com/chroma-core/chroma/issues/7462'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/chroma-through-1.5.9-authorization-bypass-via-collection-identifier
    label: disclosure@vulncheck.com
  - url: 'https://github.com/chroma-core/chroma/issues/7462'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - cve.org
  - exploit-available
epss: 0.00448
epssPercentile: 0.36201
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-19T01:39:33.294560Z'
ingestedAt: '2026-09-16T21:05:36.891Z'
---

## Overview

Chroma through 1.5.9 fails to validate tenant and database segments when resolving collections, allowing authenticated attackers to access collections from other tenants by knowing the collection identifier. Attackers can read, modify, and update records in foreign collections by issuing requests under their own tenant path, bypassing authorization checks.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.