Vulnerability Description
Chroma through 1.5.9 fails to validate tenant and database segments when resolving collections, allowing authenticated attackers to access collections from other tenants by knowing the collection identifier. Attackers can read, modify, and update records in foreign collections by issuing requests under their own tenant path, bypassing authorization checks.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/chroma-core/chroma
- https://github.com/chroma-core/chroma/blob/1.5.9/rust/frontend/src/get_collectio
- https://github.com/chroma-core/chroma/blob/1.5.9/rust/frontend/src/server.rs#L46
- https://github.com/chroma-core/chroma/issues/7462
- https://www.vulncheck.com/advisories/chroma-through-1.5.9-authorization-bypass-v
- https://github.com/chroma-core/chroma/issues/7462
FAQ
What is CVE-2026-92782?
CVE-2026-92782 is a vulnerability with a CVSS score of 8.1 (HIGH). Chroma through 1.5.9 fails to validate tenant and database segments when resolving collections, allowing authenticated attackers to access collections from other tenants by knowing the collection iden...
How severe is CVE-2026-92782?
CVE-2026-92782 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-92782?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.