CVE-2025-55178: Llama Stack Remote Code Execution Vulnerability
Summary
CVE-2025-55178: Llama Stack could potentially allow for remote code execution. Affects llama-stack versions < 0.2.20. Fixed in 0.2.20. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Llama Stack is an open-source Python package designed for building and managing machine learning models. It provides a streamlined interface for model training, evaluation, and deployment. However, prior to version 0.2.20, Llama Stack had a critical vulnerability that allowed unverified parameters to be processed in the resolve_ast_by_type function, potentially leading to remote code execution.
Vulnerability Detail
The vulnerability in Llama Stack arises from the acceptance of unverified parameters in the resolve_ast_by_type function. This flaw can be exploited by an attacker to execute arbitrary code on the server where the application is running. The implications of this vulnerability are severe, as it can lead to unauthorized access, data breaches, and complete system compromise. The CVSS score for this vulnerability is 5.3, indicating a moderate severity level.
How To Fix
Latest published version: 0.7.3 as of 22 Oct 2026
pip install --upgrade "llama-stack==0.7.3"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.2.20
This is the first release that contains the fix.
pip install --upgrade "llama-stack==0.2.20"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If you are unable to update the package immediately, consider implementing input validation to sanitize parameters before they are passed to the resolve_ast_by_type function. This can help mitigate the risk of remote code execution until you can apply the official patch.
Conclusion
The Llama Stack vulnerability (CVE-2025-55178) poses a significant risk due to the potential for remote code execution. It is crucial for users to update to version 0.2.20 or later to mitigate this risk. Additionally, implementing input validation can serve as a temporary workaround until the update is applied.
See every vulnerability recorded for llama-stack →
FAQ
The vulnerability allows for remote code execution due to unverified parameters being accepted in a specific function.
You can use the Vulert playground at Vulert Scanner to check if your application is affected without needing to sign up.
Implement input validation to sanitize parameters until you can update to the patched version.
The CVSS score for this vulnerability is 5.3, indicating a moderate severity level.
You can visit the official Llama Stack documentation or its GitHub repository for more details on its features and usage.
References
Related vulnerabilities
Recent vulnerabilities recorded for llama-stack.
