CVE-2026-92782
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Chroma through 1.5.9 fails to validate tenant and database segments when resolving collections, allowing authenticated attackers to access collections from other tenants by knowing the collection identifier. Attackers can read, modify, and update records in foreign collections by issuing requests under their own tenant path, bypassing authorization checks.
Risk Assessment
Authenticated users can access and modify data belonging to other tenants, leading to a breach of multi-tenant isolation and data confidentiality. This may result in leakage or manipulation of other customers' data.
Recommendation
Upgrade Chroma to a version newer than 1.5.9 and implement validation of tenant and database segments when resolving collections.
Other vulnerabilities in Chroma
Original NVD description (English source)
Chroma through 1.5.9 fails to validate tenant and database segments when resolving collections, allowing authenticated attackers to access collections from other tenants by knowing the collection identifier. Attackers can read, modify, and update records in foreign collections by issuing requests under their own tenant path, bypassing authorization checks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS