All V1 collection-level endpoints in ChromaDB’s Python project pass None for the tenant and database to the authorization layer, allowing attackers to bypass authorization controls by using the V1 endpoints.
2026年9月4日
CVE-2026-45832 [HIGH] – All V1 collection-level endpoints in ChromaDB’s Python project pass None for the tenant an
📑 文章目录



