Max-severity flaw in ChromaDB for AI apps allows server hijacking
From BleepingComputer to All on Tue May 19 18:49:08 2026
A max-severity vulnerability in the latest Python FastAPI version of the ChromaDB project allows unauthenticated attackers to run arbitrary code on exposed servers. [...]