What is GHSA-843m-rfxf-6v2g?

GHSA-843m-rfxf-6v2g is a security advisory published by GitHub Security Advisories with High severity. A lack of authorization validation in version 1.0.0 or later of the ChromaDB Rust project allows...

Which CVE IDs does GHSA-843m-rfxf-6v2g cover?

GHSA-843m-rfxf-6v2g covers the following CVE IDs: CVE-2026-8828. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-843m-rfxf-6v2gHigh

A lack of authorization validation in version 1.0.0 or later of the ChromaDB Rust project allows...

Vendor

GitHub Security Advisories

Published

June 12, 2026

Last Modified

June 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-8828 →

📋 Description

A lack of authorization validation in version 1.0.0 or later of the ChromaDB Rust project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-8828
https://www.hiddenlayer.com/sai-security-advisory/2026-06-chromadb-2
https://github.com/advisories/GHSA-843m-rfxf-6v2g