This vulnerability allows an unauthenticated attacker to inject arbitrary code into a ChromaDB server by submitting a malicious model repository and requesting the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint with trust_remote_code set to true. Based on the CWE identifiers, the flaw involves unsafe code deserialization and execution. Successful exploitation would let the attacker run any code on the server, leading to full compromise of confidentiality, integrity, and availability.

Chroma’s ChromaDB product is affected. Any deployment running version 1.0.0 or later that exposes the specified API endpoint is vulnerable.

The CVSS score of 10 indicates critical severity, and the EPSS score of 15% indicates that the likelihood of exploitation is moderate. The vulnerability is not listed in CISA’s KEV. Based on the description, it is inferred that an attacker can exploit this flaw from any network position that can reach the vulnerable endpoint. Exploitation would involve crafting a malicious payload and sending the request, which can be automated by attackers.