Max-severity flaw in ChromaDB for AI apps allows server hijacking
BleepingComputer [Unofficial]
May 19, 2026
A max-severity vulnerability in the latest Python FastAPI version of the ChromaDB project allows unauthenticated attackers to run arbitrary code on exposed servers. [...]
Discussion in the ATmosphere