CVE-2025-55178: Llama Stack Remote Code Execution Vulnerability
Summary
CVE-2025-55178: Llama Stack could potentially allow for remote code execution. Affects llama-stack versions < 0.2.20. Fixed in 0.2.20. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Llama Stack is a Python package designed for building and managing machine learning models efficiently. It provides a range of functionalities, including data processing, model training, and deployment. However, prior to version 0.2.20, Llama Stack had a critical vulnerability that allowed unverified parameters in its resolve_ast_by_type function, potentially leading to remote code execution.
Vulnerability Detail
The vulnerability in Llama Stack arises from its failure to validate input parameters in the resolve_ast_by_type function. This oversight can be exploited by an attacker to execute arbitrary code remotely, posing significant security risks. The issue is categorized under CWE-20, indicating improper input validation. If exploited, this vulnerability could allow unauthorized access to sensitive data or system control, making it crucial for users to address it promptly.
How To Fix
Latest published version: 0.7.3 as of 22 Oct 2026
pip install --upgrade "llama-stack==0.7.3"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.2.20
This is the first release that contains the fix.
pip install --upgrade "llama-stack==0.2.20"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can implement input validation checks in their code before passing parameters to the resolve_ast_by_type function. This can help mitigate the risk of remote code execution until the package is updated. Example code for input validation could look like this:
if validate_input(parameters): result = llama_stack.resolve_ast_by_type(parameters) else: raise ValueError('Invalid input parameters')
Conclusion
The Llama Stack vulnerability CVE-2025-55178 poses a significant risk due to its potential for remote code execution. Users are strongly advised to update to version 0.2.20 or later to mitigate this risk. Implementing input validation can serve as a temporary measure until the update is applied.
See every vulnerability recorded for llama-stack →
FAQ
CVE-2025-55178 is a vulnerability in Llama Stack that allows for remote code execution due to unverified parameters in the resolve_ast_by_type function.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability has a CVSS score of 5.3, indicating a moderate severity level.
If you cannot update the package right away, implement input validation checks as a temporary workaround to mitigate the risk.
You can find more information about Llama Stack and its functionalities on its official documentation page or GitHub repository.
References
Related vulnerabilities
Recent vulnerabilities recorded for llama-stack.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
