Max-severity flaw in ChromaDB for AI apps allows server hijacking
The most recent Python FastAPI version of the ChromaDB project has a max-severity flaw that lets unauthenticated attackers execute arbitrary code on servers that are exposed.
The vulnerability was reported to ChromaDB on February 17 and is listed as CVE-2026-45829. The business that found it, HiddenLayer, gave it the highest severity score.
Agentic AI and associated apps employ ChromaDB, an open-source vector database and AI retrieval backend. During large-language model (LLM) inference, it makes it possible to retrieve documents that are semantically relevant.
The PyPI package, which receives about 14 million downloads each month, is susceptible when servers are reachable via HTTP because the vulnerability affects the codebase that contains the Python API server functionality.
...