Skip to content

Vulnerabilities of Chroma ChromaDB

Is your version affected?

CVE Summary Score Published
CVE-2026-45833 A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated… 9.4 Critical Jun 12, 2026
CVE-2026-45829 A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an… 10.0 Critical May 18, 2026