CVE-2026-25211: Llama Stack Exposes Secret in Initialization Log
Summary
CVE-2026-25211: Llama Stack exposes secret in initialization log. Affects llama-stack versions < 0.4.4. Fixed in 0.4.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Llama Stack, also known as llama-stack, is a Python package designed for managing and deploying machine learning models efficiently. It provides a streamlined interface for integrating various components of the machine learning workflow. However, prior to version 0.4.0rc3, Llama Stack had a critical vulnerability that allowed sensitive information, specifically the pgvector password, to be exposed in the initialization log, potentially compromising user security.
Vulnerability Detail
The vulnerability arises from the failure of Llama Stack to properly censor sensitive information in its initialization logs. This oversight means that any user or system with access to these logs could potentially view the pgvector password, leading to unauthorized access to databases or other critical systems. The lack of proper logging practices can have serious ramifications, especially in production environments where sensitive data is handled.
How To Fix
Latest published version: 0.7.3 as of 22 Oct 2026
pip install --upgrade "llama-stack==0.7.3"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.4.4
This is the first release that contains the fix.
pip install --upgrade "llama-stack==0.4.4"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can manually review and sanitize their initialization logs to remove any sensitive information until they can upgrade to the patched version. Additionally, consider implementing stricter access controls to log files to prevent unauthorized access.
Conclusion
In summary, the vulnerability identified as CVE-2026-25211 in Llama Stack poses a risk by exposing sensitive information in initialization logs. Users are strongly advised to upgrade to version 0.4.4 or later to mitigate this risk. Until an upgrade can be performed, temporary workarounds should be implemented to protect sensitive data.
See every vulnerability recorded for llama-stack →
FAQ
The vulnerability allows the pgvector password to be exposed in the initialization log, which can lead to unauthorized access.
You can use the Vulert playground at Vulert Scanner to check if your application is affected without needing to sign up.
The CVSS score of this vulnerability is 3.2, indicating a low severity level.
If you cannot upgrade immediately, review your initialization logs and sanitize them to remove any sensitive information, and restrict access to these logs.
More information about Llama Stack can be found on its official PyPI page or GitHub repository.
Related vulnerabilities
Recent vulnerabilities recorded for llama-stack.
