ChromaDB Code Injection Vulnerability: Early Warning

Severity

HIGH

Affected component

chromadb (pypi)

Affected versions

>= 0.4.17, <= 1.5.9 or >= 0.4.17, <= 0.4.17 or >= 0.4.18, <= 0.4.18 or >= 0.4.19, <= 0.4.19 or >= 0.4.20, <= 0.4.20 or >= 0.4.21, <= 0.4.21 or >= 0.4.22, <= 0.4.22 or >= 0.4.23, <= 0.4.23 or >= 0.4.24, <= 0.4.24 or >= 0.5.0, <= 0.5.0 or >= 0.5.1, <= 0.5.1 or >= 0.5.10, <= 0.5.10 or >= 0.5.11, <= 0.5.11 or >= 0.5.12, <= 0.5.12 or >= 0.5.13, <= 0.5.13 or >= 0.5.15, <= 0.5.15 or >= 0.5.16, <= 0.5.16 or >= 0.5.17, <= 0.5.17 or >= 0.5.18, <= 0.5.18 or >= 0.5.2, <= 0.5.2 or >= 0.5.20, <= 0.5.20 or >= 0.5.21, <= 0.5.21 or >= 0.5.23, <= 0.5.23 or >= 0.5.3, <= 0.5.3 or >= 0.5.4, <= 0.5.4 or >= 0.5.5, <= 0.5.5 or >= 0.5.7, <= 0.5.7 or >= 0.5.9, <= 0.5.9 or >= 0.6.0, <= 0.6.0 or >= 0.6.1, <= 0.6.1 or >= 0.6.2, <= 0.6.2 or >= 0.6.3, <= 0.6.3 or >= 1.0.0, <= 1.0.0 or >= 1.0.0b0, <= 1.0.0b0 or >= 1.0.10, <= 1.0.10 or >= 1.0.11, <= 1.0.11 or >= 1.0.12, <= 1.0.12 or >= 1.0.13, <= 1.0.13 or >= 1.0.15, <= 1.0.15 or >= 1.0.16, <= 1.0.16 or >= 1.0.17, <= 1.0.17 or >= 1.0.18, <= 1.0.18 or >= 1.0.19, <= 1.0.19 or >= 1.0.2, <= 1.0.2 or >= 1.0.20, <= 1.0.20 or >= 1.0.21, <= 1.0.21 or >= 1.0.3, <= 1.0.3 or >= 1.0.4, <= 1.0.4 or >= 1.0.5, <= 1.0.5 or >= 1.0.6, <= 1.0.6 or >= 1.0.7, <= 1.0.7 or >= 1.0.8, <= 1.0.8 or >= 1.0.9, <= 1.0.9 or >= 1.1.0, <= 1.1.0 or >= 1.1.1, <= 1.1.1 or >= 1.2.0, <= 1.2.0 or >= 1.2.1, <= 1.2.1 or >= 1.2.2, <= 1.2.2 or >= 1.3.0, <= 1.3.0 or >= 1.3.2, <= 1.3.2 or >= 1.3.3, <= 1.3.3 or >= 1.3.4, <= 1.3.4 or >= 1.3.5, <= 1.3.5 or >= 1.3.6, <= 1.3.6 or >= 1.3.7, <= 1.3.7 or >= 1.4.0, <= 1.4.0 or >= 1.4.1, <= 1.4.1 or >= 1.5.0, <= 1.5.0 or >= 1.5.1, <= 1.5.1 or >= 1.5.2, <= 1.5.2 or >= 1.5.3, <= 1.5.3 or >= 1.5.4, <= 1.5.4 or >= 1.5.5, <= 1.5.5 or >= 1.5.6, <= 1.5.6 or >= 1.5.7, <= 1.5.7 or >= 1.5.8, <= 1.5.8 or >= 1.5.9, <= 1.5.9 or >= 1.0.0, <= 1.5.9 or >= 1.0.0, <= 1.0.0 or >= 1.0.10, <= 1.0.10 or >= 1.0.11, <= 1.0.11 or >= 1.0.12, <= 1.0.12 or >= 1.0.13, <= 1.0.13 or >= 1.0.15, <= 1.0.15 or >= 1.0.16, <= 1.0.16 or >= 1.0.17, <= 1.0.17 or >= 1.0.18, <= 1.0.18 or >= 1.0.19, <= 1.0.19 or >= 1.0.2, <= 1.0.2 or >= 1.0.20, <= 1.0.20 or >= 1.0.21, <= 1.0.21 or >= 1.0.3, <= 1.0.3 or >= 1.0.4, <= 1.0.4 or >= 1.0.5, <= 1.0.5 or >= 1.0.6, <= 1.0.6 or >= 1.0.7, <= 1.0.7 or >= 1.0.8, <= 1.0.8 or >= 1.0.9, <= 1.0.9 or >= 1.1.0, <= 1.1.0 or >= 1.1.1, <= 1.1.1 or >= 1.2.0, <= 1.2.0 or >= 1.2.1, <= 1.2.1 or >= 1.2.2, <= 1.2.2 or >= 1.3.0, <= 1.3.0 or >= 1.3.2, <= 1.3.2 or >= 1.3.3, <= 1.3.3 or >= 1.3.4, <= 1.3.4 or >= 1.3.5, <= 1.3.5 or >= 1.3.6, <= 1.3.6 or >= 1.3.7, <= 1.3.7 or >= 1.4.0, <= 1.4.0 or >= 1.4.1, <= 1.4.1 or >= 1.5.0, <= 1.5.0 or >= 1.5.1, <= 1.5.1 or >= 1.5.2, <= 1.5.2 or >= 1.5.3, <= 1.5.3 or >= 1.5.4, <= 1.5.4 or >= 1.5.5, <= 1.5.5 or >= 1.5.6, <= 1.5.6 or >= 1.5.7, <= 1.5.7 or >= 1.5.8, <= 1.5.8 or >= 1.5.9, <= 1.5.9 or >= 1.0.0, <= 1.5.9 or >= 1.0.0, <= 1.0.0 or >= 1.0.10, <= 1.0.10 or >= 1.0.11, <= 1.0.11 or >= 1.0.12, <= 1.0.12 or >= 1.0.13, <= 1.0.13 or >= 1.0.15, <= 1.0.15 or >= 1.0.16, <= 1.0.16 or >= 1.0.17, <= 1.0.17 or >= 1.0.18, <= 1.0.18 or >= 1.0.19, <= 1.0.19 or >= 1.0.2, <= 1.0.2 or >= 1.0.20, <= 1.0.20 or >= 1.0.21, <= 1.0.21 or >= 1.0.3, <= 1.0.3 or >= 1.0.4, <= 1.0.4 or >= 1.0.5, <= 1.0.5 or >= 1.0.6, <= 1.0.6 or >= 1.0.7, <= 1.0.7 or >= 1.0.8, <= 1.0.8 or >= 1.0.9, <= 1.0.9 or >= 1.1.0, <= 1.1.0 or >= 1.1.1, <= 1.1.1 or >= 1.2.0, <= 1.2.0 or >= 1.2.1, <= 1.2.1 or >= 1.2.2, <= 1.2.2 or >= 1.3.0, <= 1.3.0 or >= 1.3.2, <= 1.3.2 or >= 1.3.3, <= 1.3.3 or >= 1.3.4, <= 1.3.4 or >= 1.3.5, <= 1.3.5 or >= 1.3.6, <= 1.3.6 or >= 1.3.7, <= 1.3.7 or >= 1.4.0, <= 1.4.0 or >= 1.4.1, <= 1.4.1 or >= 1.5.0, <= 1.5.0 or >= 1.5.1, <= 1.5.1 or >= 1.5.2, <= 1.5.2 or >= 1.5.3, <= 1.5.3 or >= 1.5.4, <= 1.5.4 or >= 1.5.5, <= 1.5.5 or >= 1.5.6, <= 1.5.6 or >= 1.5.7, <= 1.5.7 or >= 1.5.8, <= 1.5.8 or >= 1.5.9, <= 1.5.9

Patched version

Not yet available

An early warning has been issued for a code injection vulnerability in ChromaDB Python package versions 0.4.17 and later. Users of these versions are advised to assess their exposure and take immediate action.

What happened

An early warning has been issued regarding a code injection vulnerability in the ChromaDB Python package. This vulnerability, tracked as GHSA-36P7-VC44-83PF, affects versions 0.4.17 and later. It allows an authenticated attacker with UPDATE_COLLECTION permission to run arbitrary code on the server by sending a malicious model repository with trust_remote_code set to true to a specific API endpoint.

The vulnerability was first flagged on June 12, 2026. It is currently under investigation, and no exploitation in the wild has been confirmed. Users of affected versions should review their configurations and permissions to assess their exposure to this vulnerability.

What to do about it

• Review your current ChromaDB version and compare it against the affected version range provided in the threat data.
• If you are using an affected version, upgrade to a version of chromadb that patches this vulnerability as soon as possible.
• If upgrading is not immediately possible, apply a workaround to mitigate the risk. This may involve adjusting permissions or configurations to limit exposure.
• Monitor the provided sources for updates on patched versions and further guidance.
• Consider implementing additional security measures to protect against potential exploitation of this vulnerability.

How 0Day would have caught this

Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.

Frequently asked questions

Sources

• [GHSA-36p7-vc44-83pf] ChromaDB has a code injection vulnerability

Join the 0Day waitlist →

← Back to all threats