CVE-2025-55178

Published: Sep 24, 2025

Modified: Sep 24, 2025

PUBLISHED

Description

Llama Stack prior to version v0.2.20 accepted unverified parameters in the resolve_ast_by_type function which could potentially allow for remote code execution.

Vendor	Product	Versions
Meta Platforms, Inc	Llama Stack	affected `0.0.0 - < 0.2.20`

References

https://www.facebook.com/security/advisories/cve-2025-55178

x_refsource_CONFIRM

https://github.com/llamastack/llama-stack/pull/3281

x_refsource_CONFIRM

https://github.com/llamastack/llama-stack/releases/tag/v0.2.20

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2025-55178

Description

Affected Products

References