Skip to content
Threat Feed

Vendor

Chroma

1 brief RSS
critical threat

Unpatched ChromaDB Vulnerability CVE-2026-45829 Allows Remote Code Execution

An unpatched pre-authentication remote code execution (RCE) vulnerability, tracked as CVE-2026-45829 and referred to as ChromaToast, in ChromaDB versions 1.0.0 and later allows remote, unauthenticated attackers to execute arbitrary code and leak sensitive information, potentially leading to a server takeover.

ChromaDB >= 1.0.0 chromadb rce cve-2026-45829 huggingface vectordatabase
2r 1t 1c