Skip to content
OpenAdvisories

Package · PyPI

llama-stack

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 3.2
    CVE-2026-25211 Public exploit

    Llama Stack exposes secret in initialization log

    Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.

    llamastack Llama Stack llama-stack PyPI
  • Medium 5.3
    CVE-2025-55178

    Llama Stack could potentially allow for remote code execution

    Llama Stack prior to version v0.2.20 accepted unverified parameters in the resolve_ast_by_type function which could potentially allow for remote code execution.

    Meta Platforms Llama Stack llama-stack PyPI