{"action":"Upgrade llama-stack to 0.2.20 or later.","affected":[{"fixed":"0.2.20","introduced":"0"}],"component":"llama-stack","cve_ids":["CVE-2025-55178"],"ecosystem":"PyPI","epss":0.00504,"exploited":false,"fixed_versions":["0.2.20"],"ghsa_id":"GHSA-x75h-m6jj-6cj2","id":"tcs_01M5KGTD0WQEVQ2SWTTH3ECC7E","modified_at":"2026-07-07T17:46:54.134086467Z","published_at":"2026-07-07T16:03:05.377636Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1571","https://nvd.nist.gov/vuln/detail/CVE-2025-55178","https://github.com/llamastack/llama-stack/pull/3281","https://github.com/llamastack/llama-stack/commit/efdb5558b8dcab4d141678bfed0a405e2f312b6f","https://github.com/llamastack/llama-stack","https://github.com/llamastack/llama-stack/releases/tag/v0.2.20","https://www.facebook.com/security/advisories/cve-2025-55178","https://pypi.org/project/llama-stack","https://github.com/advisories/GHSA-x75h-m6jj-6cj2"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-1571","url":"https://osv.dev/vulnerability/PYSEC-2026-1571"}],"summary":"Llama Stack could potentially allow for remote code execution"}