CVE-2026-25211
Llama Stack exposes secret in initialization log
Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.
- Record
CVE-2026-25211- CVSS 3.1
- 3.2 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N - Weakness
- CWE-532
- Updated
- 2026-11-02
EUVDEUVD-2026-5041
Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.
- Record
EUVD-2026-5041- CVSS 3.1
- 3.2 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-xmfj-7pp5-fxr6
Llama Stack exposes secret in initialization log
Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.
- Record
GHSA-xmfj-7pp5-fxr6- CVSS 3.1
- 3.2 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N - Weakness
- CWE-532
- Updated
- 2026-11-02
NVD
Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.
- Record
CVE-2026-25211- CVSS 3.1
- 3.2 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N - Weakness
- CWE-532
- Updated
- 2026-11-02
OSV
Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.
- Record
CVE-2026-25211- CVSS 3.1
- 3.2 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N - Weakness
- CWE-532
- Updated
- 2026-11-02
OSVGHSA-xmfj-7pp5-fxr6
Llama Stack exposes secret in initialization log
Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.
- Record
GHSA-xmfj-7pp5-fxr6- CVSS 3.1
- 3.2 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N - Weakness
- CWE-532
- Updated
- 2026-11-02
OSVPYSEC-2026-1572
Llama Stack exposes secret in initialization log
Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.
- Record
PYSEC-2026-1572- CVSS 3.1
- 3.2 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
llama-stackPyPI |
before 0.4.4 | 0.4.4 |
llama-stackPyPI |
before 0.4.4, plus listed versions 0.0.180.0.190.0.1a00.0.1a10.0.1a2 Show 45 moreShow less0.0.1a30.0.1a40.0.1a50.0.200.0.210.0.230.0.240.0.350.0.360.0.370.0.380.0.390.0.400.0.410.0.420.0.430.0.440.0.450.0.460.0.470.0.480.0.490.0.500.0.510.0.51.dev00.0.520.0.530.0.540.0.550.0.560.0.570.0.580.0.590.0.600.0.610.0.620.0.630.1.00.1.10.1.20.1.30.1.40.1.50.1.5.10.1.6 |
0.4.4 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | mbanyamer/Llama-Stack-0.4.0rc3-local-CVE-2026-25211 | 2026-01-31 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-25211 is a low vulnerability (CVSS 3.2) in Llamastack Llama Stack, published January 30, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 14th percentile. Fixed in llama-stack 0.4.4.
References
github.com/llamastack/llama-stack/pull/4439
nvd.nist.gov/vuln/detail/CVE-2026-25211
pypi.org/project/llama-stack
Left out here: 39 versions. The JSON record has them.