CVE-2026-45831

[CVE catalog]

Severity

High · CVSS 8.8CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Published

Jun 12, 2026, 3:03:58 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.24% · Oct 25, 2026

A flaw was found in the SimpleRBACAuthorizationProvider authorization provider in the ChromaDB Python project. This vulnerability allows an authenticated user to perform actions across different tenants, databases, or collections without proper authorization. The provider incorrectly evaluates user permissions without verifying the specific scope (tenant, database, or collection) to which those permissions apply. This can lead to unauthorized data access or modification across different user environments. ChromaDB: ChromaDB: Unauthorized cross-tenant actions due to improper authorization checks is a post-authentication authorization flaw in ChromaDB’s SimpleRBAC provider — it does not grant unauthenticated access and does not enable code execution. RH AI products bundle a vulnerable chromadb version but do not run the Chroma Python server with SimpleRBAC as the default product architecture (AutoRAG uses Milvus/pgvector; RHEL AI bootc uses chromadb as a library). Upstream 8.8 High assumes a multi-tenant Chroma deployment with SimpleRBAC enabled and network reachability; that configuration is not the supported RH default, so Moderate is appropriate for RHOAI and Low for RHEL AI bootc. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.