47 matches found
LlamaStack-RCE-Deterministic-Supply-Chain-Exploitation-Hardening-Framework-CVE-2024-50050-
= doi.org/10.5281/zenodo.18278567 = orcid.org/0009-0007-7728-256X ЁЯТА LlamaStack-RCE: CVE-2024-50050 рдЖрдкреВрд░реНрддрд┐ рд╢реНрд░реГрдВрдЦрд▓рд╛ рд╢реЛрд╖рдг рдврд╛рдВрдЪрд╛ рдЕрдкреНрд░рддрд┐рдмрдВрдзрд┐рдд рд╡рд░реНрдЧреАрдХреГрдд рд╕рд╛рдордЧреНрд░реА - рдХреЗрд╡рд▓ рдЕрдзрд┐рдХреГрдд рд░реЗрдб рдЯреАрдорд┐рдВрдЧ рдХреЗ рд▓рд┐рдП 1. рдХрд╛рд░реНрдпрдХрд╛рд░реА рд╕рд╛рд░рд╛рдВрд╢ рдирд┐рд░реНрдзрд╛рд░рдгрд╛рддреНрдордХ рд╡рд┐рд╢реНрд▓реЗрд╖рдг LlamaStack-RCE рдПрдХ рдЙрдЪреНрдЪ-рд╡рд┐рд╢реНрд╡рд╕рдиреАрдпрддрд╛ рд╕рд┐рдореБрд▓реЗрд╢рди рдФрд░ рд╢реЛрд╖рдг рдврд╛рдВрдЪрд╛ рд╣реИ рдЬреЛ...
PYSEC-2026-1572 Llama Stack exposes secret in initialization log
Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...
PYSEC-2026-1571 Llama Stack could potentially allow for remote code execution
Llama Stack prior to version v0.2.20 accepted unverified parameters in the resolveastbytype function which could potentially allow for remote code execution...
EUVD-2025-209086
A flaw was found in Red Hat OpenShift AI RHOAI llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other namespaces via direct network requests, because no NetworkPolicy restricts access to the llama-stack service endpoint. As a result, a user i...
CVE-2025-12805
A flaw was found in Red Hat OpenShift AI RHOAI llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other namespaces via direct network requests, because no NetworkPolicy restricts access to the llama-stack service endpoint. As a result, a user i...
CVE-2025-12805 Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy
A flaw was found in Red Hat OpenShift AI RHOAI llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other namespaces via direct network requests, because no NetworkPolicy restricts access to the llama-stack service endpoint. As a result, a user i...
CVE-2025-12805 Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy
A flaw was found in Red Hat OpenShift AI RHOAI llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other namespaces via direct network requests, because no NetworkPolicy restricts access to the llama-stack service endpoint. As a result, a user i...
CVE-2025-12805
CVE-2025-12805 describes a flaw in Red Hat OpenShift AI (RHOAI) llama-stack-operator where Llama Stack services deployed in different namespaces can be accessed via direct network requests because no NetworkPolicy restricts the llama-stack service endpoint. This allows a user in one namespace to ...
CVE-2025-12805
A flaw was found in Red Hat OpenShift AI RHOAI llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other namespaces via direct network requests, because no NetworkPolicy restricts access to the llama-stack service endpoint. As a result, a user i...
PT-2026-28270
A flaw was found in Red Hat OpenShift AI RHOAI llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other namespaces via direct network requests, because no NetworkPolicy restricts access to the llama-stack service endpoint. As a result, a user i...
Llama Stack хоЙхЕиц╝Пц┤Ю
Llama Stack is a core building block for simplified artificial intelligence application development, open-sourced by Meta Llama. There is a security vulnerability in Llama Stack, which stems from the lack of network policy restrictions on access to the llama-stack server endpoints. This...
Exploit for CVE-2026-25211
Llama Stack pgvector Password Leak PoC CVE-2026-25211 Loc...
Insertion of Sensitive Information into Log File
Overview llama-stack is a Llama Stack Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the pgvector.py component. An attacker can obtain sensitive information by accessing log files that contain uncensored credentials. Remediation Upgrade...
Llama Stack exposes secret in initialization log
Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...
GHSA-XMFJ-7PP5-FXR6 Llama Stack exposes secret in initialization log
Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...
CVE-2026-25211
Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...
CVE-2026-25211
Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...
CVE-2026-25211
Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...