https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T15:20:41.751593+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-45829 CVE-2026-45829 2026-09-30T15:20:42.138048+00:00

Affected: ChromaDB, Red Hat Enterprise Linux AI (RHEL AI) 3

A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint.