Chroma Through 1.5.9 Authorization Bypass Via Collection Identifier

Back www.vulncheck.com

Chroma Through 1.5.9 Authorization Bypass Via Collection Identifier

www.vulncheck.com • September 17, 2026

Share: View original

the shared collection auth helper resolves the collection before checking the path

the provider caches and returns by collection id without comparing the database

Ready to get Started?

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

High-Risk CVEs Discovered in Multi-Tenant Environments Two critical vulnerabilities, CVE-2026-92761 and CVE-2026-92782, were published on September 16, 2026. CVE-2026-92761 affects WebVirtCloud, allowing low-privilege users to perform administrative actions on virtual machines, while CVE-2026-92782 impacts Chroma, enabling authenticated users to access and modify data across tenant boundaries. Both vulnerabilities pose a high risk, particularly in multi-tenant deployments, as they could lead to unauthorized access and data manipulation. The attack vectors require only valid credentials and involve exploiting insufficient authorization checks. Current exploitation status remains uncertain for both CVEs, as no proof-of-concept or active exploitation reports are available. Immediate remediation is advised to mitigate potential impacts on workloads and data integrity. 2 sources 68

Extracted Entities

Vulnerabilities (1)

Authorization Bypass Via Collection Identifier