CVE-2026-25211

Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...

CVE-2026-25211

Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...

CVE-2026-25211

Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...

CVE-2026-25211

Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...

CVE-2026-25211

Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...

EUVD-2026-5041

Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...

CVE-2026-25211

Llama Stack (llama-stack)

lightspeed-stack (>=0.1.1, <=0.4.2), lightspeed-stack-providers (>=0.1.10, <=0.4.3) +5 more potentially affected by CVE-2026-25211 via llama-stack (>=0.2.9, <=0.4.3)

llama-stack PYPI version =0.2.9, =0.1.1, =0.1.10, =1.0.1, =0.3.4, =0.1.0, =0.2.0, =0.3.0a0 Source cves: CVE-2026-25211 Source advisory: MEND:CVE-2026-25211...

Llama Stack log information leakage vulnerability

Llama Stack is a core building block for simplified artificial intelligence application development, open-sourced by Meta Llama. Versions of Llama Stack prior to 0.4.0rc3 contained a vulnerability related to log information leakage. This vulnerability stemmed from the fact that the log...

CVE-2026-25211: Insertion of Sensitive Information into Log File

Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...

PT-2026-6498

Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...

PT-2026-5384

Name of the Vulnerable Software and Affected Versions Llama Stack versions prior to 0.4.0rc3 Description The software does not properly conceal the pgvector password within the initialization logs, potentially exposing sensitive credentials. Recommendations Update to version 0.4.0rc3 or later...

Security Bulletin: Multiple Vulnerabilities affecting IBM Watson Studio in Cloud Pak for Data are addressed

Summary There are multiple vulnerabilities impacting IBM Watson Studio in Cloud Pak for Data. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2025-7647 DESCRIPTION: The llama-index-core package, up to version 0.12.44, contains a...

aiconfig-extension-gemini (0.0.5), aideml (>=0.1.0, <=0.2.2) +76 more potentially affected by CVE-2025-71176 via pytest (7.4.3)

pytest PYPI version 7.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - aiconfig-extension-gemini 0.0.5 - aideml =0.1.0, =0.1.0, =0.1.0, =4.0.0, =0.1.8, =0.0.3, =2.0.7, =0.0.1, =1.0.3, =1.0.4 and more Source cves:...

LLM Security and Safety: Insights from Homotopy-Inspired Prompt Obfuscation

In this study, we propose a homotopy-inspired prompt obfuscation framework to enhance understanding of security and safety vulnerabilities in Large Language Models LLMs. By systematically applying carefully engineered prompts, we demonstrate how latent model behaviors can be influenced in...

Rethinking On-Device LLM Reasoning: Why Analogical Mapping Outperforms Abstract Thinking for IoT DDoS Detection

The rapid expansion of IoT deployments has intensified cybersecurity threats, notably Distributed Denial of Service DDoS attacks, characterized by increasingly sophisticated patterns. Leveraging Generative AI through On-Device Large Language Models ODLLMs provides a viable solution for real-time...

Many Hands Make Light Work: An LLM-Based Multi-Agent System for Detecting Malicious PyPI Packages

Malicious code in open-source repositories such as PyPI poses a growing threat to software supply chains. Traditional rule-based tools often overlook the semantic patterns in source code that are crucial for identifying adversarial components. Large language models LLMs show promise for software...

Exploit for CVE-2024-50050

--- 💀 LlamaStack-RCE: CVE-2024-50050 Supply Chain Exploitatio...

Linux Distros Unpatched Vulnerability : CVE-2026-21869

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp is an inference of several LLM models in C/C++. In commits 55d4206c8 and prior, the ndiscard parameter is parsed directly from JSON input in the...

CVE-2024-14021

LlamaIndex run-llama/llamaindex versions up to and including 0.11.6 contain an unsafe deserialization vulnerability in BGEM3Index.loadfromdisk in llamaindex/indices/managed/bgem3/base.py. The function uses pickle.load to deserialize multiembedstore.pkl from a user-supplied persistdir without...