Skip to content
OpenAdvisories

Vendor

EKKOLearnAI

2 known vulnerabilities.

Products

ekko-studio 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-114379

    EKKOLearnAI ekko-studio Media Generation API media.ts saveGeneratedImages file inclusion

    A flaw has been found in EKKOLearnAI ekko-studio up to 1.0.6. This vulnerability affects the function saveGeneratedImages of the file packages/server/src/modules/studio/controllers/media.ts of the component Media Generation API. This manipulation of the argum…

    EKKOLearnAI ekko-studio
  • Medium 5.4
    CVE-2026-111679

    Ekko Studio through 0.7.36 Missing Authorization via /api/auth/locked-ips

    Ekko Studio through 0.7.36 contains a missing authorization vulnerability that allows any authenticated non-super_admin user to list and clear server-wide login lockouts via /api/auth/locked-ips. Attackers can send DELETE requests without an ip parameter to i…

    EKKOLearnAI ekko-studio