CVE-2026-45831
Description
A flaw was found in the SimpleRBACAuthorizationProvider authorization provider in the ChromaDB Python project. This vulnerability allows an authenticated user to perform actions across different tenants, databases, or collections without proper authorization. The provider incorrectly evaluates user permissions without verifying the specific scope (tenant, database, or collection) to which those permissions apply. This can lead to unauthorized data access or modification across different user environments.
Statement
is a post-authentication authorization flaw in ChromaDB’s SimpleRBAC provider — it does not grant unauthenticated access and does not enable code execution. RH AI products bundle a vulnerable chromadb version but do not run the Chroma Python server with SimpleRBAC as the default product architecture (AutoRAG uses Milvus/pgvector; RHEL AI bootc uses chromadb as a library). Upstream 8.8 High assumes a multi-tenant Chroma deployment with SimpleRBAC enabled and network reachability; that configuration is not the supported RH default, so Moderate is appropriate for RHOAI and Low for RHEL AI bootc.
Mitigation
To mitigate this issue, restrict network access to the ChromaDB instance to only trusted clients and services. Implement firewall rules to limit inbound connections to the ChromaDB port from authorized sources. If strict multi-tenant isolation is critical, consider deploying ChromaDB in a single-tenant configuration or exploring alternative authorization mechanisms if available, until a fix for the `SimpleRBACAuthorizationProvider` is deployed.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 6.8 | 8.8 | N/A |
| Attack Vector | Network | Network | N/A |
| Attack Complexity | High | Low | N/A |
| Privileges Required | Low | Low | N/A |
| User Interaction | None | None | N/A |
| Scope | Unchanged | Unchanged | N/A |
| Confidentiality | High | High | N/A |
| Integrity Impact | High | High | N/A |
| Availability Impact | None | High | N/A |
Vector
Red Hat: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
NVD: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Understanding the Weakness (CWE)
Confidentiality,Integrity,Availability,Access Control
Technical Impact: Modify Memory; Read Memory; Execute Unauthorized Code or Commands; Gain Privileges or Assume Identity; Bypass Protection Mechanism; Other
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
