Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-55178

Llama Stack prior to version v0.2.20 accepted unverified parameters in the resolve_ast_by_type function which could potentially allow for remote code execution.

Description

Llama Stack prior to version v0.2.20 accepted unverified parameters in the resolve_ast_by_type function which could potentially allow for remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Meta Platforms, Inc Llama Stack

Default version status: unaffected

  • 0.0.0 to < 0.2.20affected

References