ChromaDB Race Condition Remote Code Execution | MSSP Advisory

ChromaDB versions 1.0.0 through 1.5.8 contain a critical race condition vulnerability (CVE-2026-45829) that allows unauthenticated remote code execution through malicious model configurations loaded from Hugging Face. The flaw bypasses authentication checks because the model execution happens before the auth validation completes. Over 73% of internet-exposed ChromaDB instances run vulnerable versions.

Your clients deploying AI applications likely run ChromaDB as their vector database, and this gives attackers direct RCE without authentication. If your own development or testing environments use ChromaDB for AI proof-of-concepts or client demos, you have direct exposure through your infrastructure. Clients expect you to know about critical flaws in their AI stack before they get compromised.

📬