Skip to content

PatchFirst · Latest vulnerabilities

llama-stack vulnerabilities

Vulnerabilities published for llama-stack in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 2

CVE-2026-25211
Low · CVSS 3.2EPSS 0.24%Fix available
CVE-2026-25211
Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.
llama-stack Python
- Update to 0.4.4
Published January 30, 2026Updated February 3, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2025-55178
Medium · CVSS 5.3EPSS 0.5%Fix available
CVE-2025-55178
Llama Stack prior to version v0.2.20 accepted unverified parameters in the resolve_ast_by_type function which could potentially allow for remote code execution.
llama-stack Python
- Update to 0.2.20
Published September 24, 2025Updated September 24, 2025
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →