#max-severity


Max-severity flaw in ChromaDB for AI apps allows server hijacking

May 20, 2026 // 01:36

A max-severity vulnerability in the latest Python FastAPI version of the ChromaDB project allows unauthenticated attackers to run arbitrary code on exposed servers. The flaw […]