Chroma DB API endpoints were accessible and exposed collection metadata, enabling enumeration of collections under the default tenant and database, potentially leading to sensitive vector data disclosure.
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view