This vulnerability allows an unauthenticated attacker to inject arbitrary code into a ChromaDB server by submitting a malicious model repository and requesting the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint with trust_remote_code set to true. The flaw involves unsafe code deserialization and execution, identified by CWE‑94 (Improper Control of Generation of Code) and CWE‑502 (Deserialization of Untrusted Data). Successful exploitation would let the attacker run any code on the server, leading to full compromise of confidentiality, integrity, and availability.

Chroma’s ChromaDB product is affected. Any deployment running version 1.0.0 or later that exposes the specified API endpoint is vulnerable.

The CVSS score of 10 indicates critical severity, and the EPSS score of 12% shows the likelihood of exploitation is high. The vulnerability is not listed in CISA’s KEV catalog. Likely attack vector is remote API access; based on the description, it is inferred that an attacker can exploit this flaw from any network position that can reach the vulnerable endpoint. Exploitation would involve crafting a malicious payload and sending the request, which can be automated by attackers.