Horizon Alert
Summary of the vulnerability and why it matters
A critical vulnerability in ChromaDB allows an attacker to inject and execute arbitrary code on the server. This happens when a specially crafted request is sent to a specific API endpoint, which could lead to a complete compromise of the affected system.
- It impacts systems running vulnerable ChromaDB.
- Allows remote code execution.
- No authentication needed to exploit.
Attack Path
How an attacker could exploit the issue
An unauthenticated attacker could exploit this pre-authentication code injection vulnerability by sending a specially crafted request to the ChromaDB API. This request would include a malicious model repository and set `trust_remote_code` to true, leading to arbitrary code execution on the server. This attack is particularly concerning because it requires no prior access to the system.
- Target the `/api/v2/tenants/{tenant}/databases/{db}/collections` endpoint.
- Attacker controls model repository.
- `trust_remote_code` set to true.
Live Threat
Current exploitation, exposure, and threat context
This vulnerability presents a significant risk due to its pre-authentication, remote code execution nature. Attackers are likely to be interested because the vulnerability allows direct code execution on the server without needing any prior access or credentials. The published details and severity suggest it could be a prime target for immediate exploitation.
- Public exploit proof-of-concept available.
- Critical vulnerability with easy exploit path.
- Recent research published on the flaw.
Priority actions
Operational Fix
Recommended remediation, mitigation, and detection steps
Prioritize blocking network access to the `/api/v2/tenants/{tenant}/databases/{db}/collections` endpoint, especially for any publicly exposed ChromaDB instances. Immediately investigate and confirm if any of your services are running a vulnerable version of ChromaDB and assess the risk based on network exposure. Given this is a pre-authentication code injection, any exposure poses a critical risk.
- Block network access to the vulnerable endpoint.
- Isolate or take affected services offline.
- Monitor for malicious payloads in traffic.
