DossierENTITY

ChromaDB

Coverage of ChromaDB in the Nexus archive.

Earliest in view: May 19 · 22:25 UTCMost recent: May 19 · 22:25 UTC

Co-mentioned in this coverage

Recent coverage

SECURITYMay 19 · 22:25 UTCBLEEPING COMPUTER
Max-severity flaw in ChromaDB for AI apps allows server hijacking
A max-severity vulnerability in ChromaDB's Python FastAPI version allows unauthenticated attackers to run arbitrary code on exposed servers, potentially leading to server hijacking. This flaw affects the latest version of the project, putting AI apps at risk. The vulnerability enables attackers to execute malicious code without authentication.