The SimpleRBACAuthorizationProvider in ChromaDB evaluates whether a user holds a given permission but neglects to verify the tenant, database, or collection to which that permission applies. As a result, an attacker who obtains any permission for an object can perform actions on objects belonging to other tenants, effectively bypassing data isolation and compromising confidentiality and integrity across tenant boundaries.

Chroma:ChromaDB, versions 0.5.0 and later.

The vulnerability carries a CVSS score of 8.8, indicating a high level of severity. EPSS data is unavailable, but the lack of tenant context makes it trivial for an authenticated user with any permission to exploit the flaw. The flaw is not listed in the CISA KEV catalog, but the potential for cross‑tenant data access remains significant. Attackers can likely trigger the flaw through ordinary API calls or other interfaces that invoke the authorization provider, requiring no special conditions beyond possessing a legitimate permission.