← Back

CVE-2026-25211

nvd nist
Published: Jan 30, 2026Modified: Jun 17, 2026Deferred

JSON object

Loading...
3.2
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
Exploitability: 1.4 / Impact: 1.4
Source: MITRE (Secondary)

Description

Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.

Related CWEs

CWE-532
Insertion of Sensitive Information into Log File
Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (2)

Source: cve@mitre.org
Source: cve@mitre.org

Timeline

No history available yet.