Llama StackGHSA-x75h-m6jj-6cj2
Llama Stack could potentially allow for remote code execution
Medium5.3CVE-2025-55178 · Published Sep 24, 2025 · updated Jul 7, 2026
Llama Stack prior to version v0.2.20 accepted unverified parameters in the resolve_ast_by_type function which could potentially allow for remote code execution.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| llama-stack PyPI | < 0.2.20 | 0.2.20 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-20
- Also known as
- CVE-2025-55178, PYSEC-2026-1571
- nvd.nist.gov/vuln/detail/CVE-2025-55178
- github.com/llamastack/llama-stack/pull/3281
- github.com/llamastack/llama-stack/commit/efdb5558b8dcab4d141678bfed0a405e2f312b6f
- github.com/llamastack/llama-stack
- github.com/llamastack/llama-stack/releases/tag/v0.2.20
- www.facebook.com/security/advisories/cve-2025-55178
More Llama Stack advisories
All Llama Stack| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jan 30 | Llama Stack exposes secret in initialization log Low3.2Jan 30 | Low3.2 | 0.4.4 |