Max-severity flaw in ChromaDB for AI apps allows server hijacking
… Until it becomes clear that CVE-2026-45829 has been patched, the recommendation for impacted users is to pick the Rust frontend for their deployments or avoid exposing the Python server publicly. …