rootpwn

high · CVSS v3 8.1 · CVSS v4 8.6

CVE-2026-92782

Chroma versions up to and including 1.5.9 contain an authorization bypass vulnerability within its collection resolution logic. Authenticate

Overview

Chroma versions up to and including 1.5.9 contain an authorization bypass vulnerability within its collection resolution logic. Authenticated users can read, modify, or update vector collections belonging to other tenants if the target collection identifier is known. This flaw effectively breaks multi-tenant data isolation boundaries.

Description

Chroma through 1.5.9 fails to validate tenant and database segments when resolving collections, allowing authenticated attackers to access collections from other tenants by knowing the collection identifier. Attackers can read, modify, and update records in foreign collections by issuing requests under their own tenant path, bypassing authorization checks.

Impact

Impacts deployments utilizing Chroma as a multi-tenant vector database. Confidentiality and integrity are impacted, as authenticated users can view, alter, and overwrite data belonging to foreign tenants without authorization.

Remediation

Upgrade Chroma to a version newer than 1.5.9 that includes patched authorization validation for tenant and database segments. If patching immediately is not possible, enforce tenant validation upstream using an API gateway or middleware service to verify collection ownership before routing requests.

Risk context

Carries High severity with a CVSS v3 score of 8.1 and CVSS v4 score of 8.6. While EPSS scores are not yet available, the vulnerability poses significant operational risk for multi-tenant AI/ML application infrastructure.

Affected products

  • Chroma
  • ChromaDB

Scores

Severity
high
CVSS v2
8.5
CVSS v3
8.1
CVSS v4
8.6
EPSS
—

Chroma Authorization Bypass Multi-Tenancy Vector Database Data Integrity Access Control

← All CVEs

Related CVEs

high

CVE-2026-81546

Affinity by Canva versions prior to 3.3.0 are vulnerable to a stack-based buffer overflow when parsing Affinity document files. An attacker can craft a malicious file that, when opened, may allow arbitrary code execution on the victim’s machine.

View analysis

high

CVE-2026-92838

A DLL hijacking flaw in GeoVision GV-Remote E-Map allows a local user with write access to a directory to drop a malicious DLL that is loaded before the legitimate one. If exploited, the attacker can run arbitrary code in the context of the GV-Remote E-Map process, potentially compromising local data and system integrity.

View analysis

high

CVE-2026-88765

A high‑severity buffer overflow in the Unicode conversion wrapper of certain Git hosting platforms allows an authenticated user to upload a crafted Git export file that triggers arbitrary remote code execution during Advanced Search indexing. The flaw can lead to full server compromise if exploited.

View analysis

high

CVE-2026-92380

A flaw has been found in WuzhiCMS up to 4.1.0. The impacted element is the function ckditor::saveRemote of the file coreframe/app/attachment/index.php of the component Remote Image Fetch. This manipulation of the argument source[] causes server-side request forgery. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

View analysis