orca.securityadvisoryOrca Security: Critical Pre-Auth RCE in ChromaDB Threatens AI Infrastructure
CVE-2026-45829 (CVSS 10.0) is a pre-authentication remote code execution flaw in ChromaDB's Python FastAPI server, versions 1.0.0 through 1.5.8. The server processes user-controlled embedding function configuration before authentication checks, letting an attacker send a crafted collection-creation request referencing a malicious HuggingFace model with trust_remote_code enabled to force arbitrary Python code execution pre-auth. Discovered by researcher Azraelxuemo and later HiddenLayer (dubbed "ChromaToast Served Pre-Auth"); Shodan-based scanning found roughly 73% of internet-exposed ChromaDB instances still vulnerable, with fixes shipped in 1.5.9.
TL;DR Unauthenticated RCE in ChromaDB's FastAPI server (CVE-2026-45829, CVSS 10.0) via malicious HuggingFace model refs with trust_remote_code — patch to 1.5.9+ or switch to the unaffected Rust frontend.
Organisations named here
- Azraelxuemo
- ChromaToast Served Pre-Auth
- HiddenLayer
CVEs named here
- CVE-2026-45829
Technologies named here
- ChromaDB Python FastAPI server
- ChromaDB
- Orca Security Platform
- Shodan
- Python
- FastAPI
- Hugging Face
- Orca Security
Related in AppSec
github.comadvisoryFlowise MCP Security Bypass Enables RCE
huntress.comwriteupInside an Oracle Database SQL Injection Attack | Huntress
github.comrepoOASIS
blog.trailofbits.comwriteup