Description (CNA)
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Chroma / ChromaDB | affected 1.0.0 through * |
CWE
CWE-94
References
- https://www.hiddenlayer.com/research/chromatoast-served-pre-auth
- https://github.com/chroma-core/chroma/issues/6717
ADP enrichment
No English description supplied.
A flaw was found in the ChromaDB Python project. This pre-authentication code injection vulnerability allows an unauthenticated attacker to execute arbitrary code on the server. The attacker can achieve this by sending a malicious model repository to the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint, provided that trust_remote_code is set to true. This could lead to complete compromise of the affected system.