Exploit for CVE-2026-25211

Llama Stack pgvector Password Leak PoC CVE-2026-25211 Loc...

CVE-2026-25211

creationtimestamp| type| source ---|---|--- 2026-01-30 09:34:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdmyrhxu7r2m...

lightspeed-stack (>=0.1.1 <=0.4.2), lightspeed-stack-providers (>=0.1.10 <=0.4.3) +5 more potentially affected by CVE-2026-25211 via llama-stack (>=0.2.10.1 <=0.4.3)

llama-stack PYPI version =0.2.10.1, =0.1.1, =0.1.10, =1.0.1, =0.3.4, =0.1.0, =0.2.0, =0.3.0a0 Source cves: CVE-2026-25211 Source advisory: OSV:GHSA-XMFJ-7PP5-FXR6...

lightspeed-stack (>=0.1.1 <=0.4.0), lightspeed-stack-providers (>=0.1.10 <=0.1.18) +5 more potentially affected by CVE-2026-25211 via llama-stack (>=0.2.10.1 <=0.3.5)

llama-stack PYPI version =0.2.10.1, =0.1.1, =0.1.10, =1.0.1, =0.3.4, =0.1.0, =0.2.0, =0.3.0a0 Source cves: CVE-2026-25211 Source advisory: SNYK:PYTHON-LLAMASTACK-15166608...

CVE-2026-25211

Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...

CVE-2026-25211

Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...