A newly flagged ChromaDB weakness underscores a hard truth in AI infrastructure: if request handling and trust checks are ordered badly, an ordinary API call can become a code-execution event.