llamastack

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

llamastack records in CISA KEV

No llamastack vulnerabilities are listed in CISA KEV.

1 record

TI-2026-20367 CVE-2026-25211 · GHSA-xmfj-7pp5-fxr6

LOW 15

Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.

CVSS 3.1LOW 3.2 Local No auth No interaction EPSS 0.00238 Published 2026-01-30 Fixed in 0.4.0rc3, 0.4.4 CWE-532