CVE-2026-25211

Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.

Score

CVSS 3.1 3.2 Low

Status

Deferred - cve@mitre.org

Published

2026-01-30

Last modified

2026-02-03

Weaknesses

CWE-532

Affected products

• Llama Stack (Llamastack)

References

• https://github.com/llamastack/llama-stack/compare/v0.4.0rc2...v0.4.0rc3
• https://github.com/llamastack/llama-stack/pull/4439