CVE-2026-45832 - CERT CVE

  1. CVE-2026-45832

ID CVE-2026-45832
Sažetak All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the authorization layer, allowing attackers to bypass authorization controls by using the V1 endpoints.
Reference
CVSS
Base: 0.0
Impact: None
Exploitability:None
Pristup
VektorSloženostAutentikacija
None None None
Impact
PovjerljivostCjelovitostDostupnost
None None None
CVSS vektor None
Zadnje važnije ažuriranje 12-06-2026 - 16:23
Objavljeno 12-06-2026 - 16:16