CVE-2026-25211

low

Red Hat

CVSS v3 Base Score

3.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

EPSS Score

0.0%

Exploitation probability in 30 days

Top 100% most likely to be exploited

Attack Characteristics

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Confidentiality

Low

Integrity

None

Availability

None

Published: January 7, 2026 (127 days ago)

Last Modified: January 7, 2026

Vendor: Red Hat

Description

Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.

CWE-532

Red Hat OpenShift AI (RHOAI)