Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
FULL-ANALYSIS---CVE-2026-45829-ChromaDB- — Functional proof-of-concept exploit for CVE-2026-45829, a critical pre-authentication remote code execution vulnerability in ChromaDB (CVSS 10.0) via malicious model loading with trust_remote_code=true. | Kitploit
Tools/GitHubGitHub/fevar54/full-analysis---cve-2026-45829-chromadb-
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRed Teaming
GitHubfevar54/full-analysis---cve-2026-45829-chromadb-

FULL-ANALYSIS---CVE-2026-45829-ChromaDB-

Functional proof-of-concept exploit for CVE-2026-45829, a critical pre-authentication remote code execution vulnerability in ChromaDB (CVSS 10.0) via malicious model loading with trust_remote_code=true.

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
View Repository
113 months agoNot yet reviewed
Share

CVE-2026-45829 - ChromaDB Pre-Auth RCE (CVSS 10.0)

⚠️ WARNING

This repository contains a FUNCTIONAL PoC for CVE-2026-45829. ONLY for authorized testing in controlled environments.

Description

Critical vulnerability in ChromaDB (versions 1.0.0 to 1.5.8) that allows an unauthenticated attacker to execute arbitrary code by loading a malicious model from Hugging Face with trust_remote_code=true.

PoC Usage

Prepare listener

root@kitploit:~
nc -lvnp 4444```
Download Tool