Database/AI/ML frameworks & serving
ChromaDB: Pre-authentication code injection
CVSS 10.0CVE-2026-45829AI/ML frameworks & servingcurated
Impact
Pre-authentication code injection → arbitrary code execution
Who can reach it
Unauthenticated network to the Chroma server
What to do
Upgrade. Maximum severity, no auth required — any tenant-reachable Chroma is fully compromised
References
Related entries
- ChromaDB: Authenticated code injectionCVE-2026-45833 · ChromaDBHigh
- Kubeflow Pipelines frontend: unauthenticated SSRF proxy reaches cloud metadata and cluster-internal APIsCVE-2026-54745 · Kubeflow Pipelines frontend (/_proxy/ route in proxy-middleware.ts)Critical
- Xinference: unauthenticated chat request reaches eval() in the Llama3 tool-call parserCVE-2026-61539 · Xinference (Llama3 tool-call parser, `_eval_llama3_chat_arguments`)Critical
- Decepticon: unfiltered ChatML special tokens in crawl results give a target page control of the agentCVE-2026-61732 · Decepticon (LLM message construction from crawl output)Critical
- ClearML web server: XSSCVE-2024-24594 · ClearML web serverCritical
- Red Hat OpenShift AI (notebook plane): A low-privileged data-scientist account can escalate to full cluster compromiseCVE-2025-10725 · Red Hat OpenShift AI (notebook plane)Critical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.