Skip to content
OpenAdvisories

Vendor

Meta Platforms

17 known vulnerabilities.

4 results · Clear filters · Feed

  • Medium 5.3

    Llama Stack could potentially allow for remote code execution

    Llama Stack prior to version v0.2.20 accepted unverified parameters in the resolve_ast_by_type function which could potentially allow for remote code execution.

  • Medium 6.8
    CVE-2025-27591 Public exploit

    Below has Incorrect Permission Assignment for Critical Resource

    A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that…

  • Medium 6.3
    CVE-2024-50050 Public exploit

    Llama Stack prior to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005 used pickle as a serialization format for socket…

  • Medium 6.1

    Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross-site scripting on link c…