https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:41:37.590989+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-45830 CVE-2026-45830 2026-10-03T02:41:37.621473+00:00

Affected: ChromaDB, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI)

A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to.

 https://cve.radiocsirt.org/vuln/ghsa-2wm9-hf6c-p5cr GHSA-2wm9-hf6c-p5cr — ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection 2026-10-03T02:41:37.621532+00:00

Affected: PyPI: chromadb

A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to.