Unknown
rss_bleepingcomputer
·
rss_e36bd5ee339b87ec796adc7312076c34
Max-severity flaw in ChromaDB for AI apps allows server hijacking
Published May 19, 2026
A max-severity vulnerability in the latest Python FastAPI version of the ChromaDB project allows unauthenticated attackers to run arbitrary code on exposed servers. [...]
Affected AI Products
chromadb
chroma