Ekko Studio
Approved changes feed: RSS · Atom
cpe:2.3:a:ekkolearnai:ekko-studio:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Ekkolearnai (6d6a2a0b-513c-5265-a3db-9e1674cf3988) |
|---|---|
| Product | Ekko Studio (ca9b2e93-aacc-5ab8-9d9f-68953e93baa0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-114379 |
vulnerable | 2026-11-03 10:15:53.525073 |
EKKOLearnAI ekko-studio Media Generation API media.ts saveGeneratedImages file inclusion
MEDIUM (5.4)
A flaw has been found in EKKOLearnAI ekko-studio up to 1.0.6. This vulnerability affects the function saveGeneratedImages of the file packages/server/src/modules/studio/controllers/media.ts of the component Media Generation API. This manipulation of the argument output_path causes file inclusion. Remote exploitation of the attack is possible. Patch name: 1d42459c292f89e412f7f6243829e7fed2e85bf5. It is recommended to apply a patch to fix this issue.
Published: 2026-10-21T20:45:17.247Z
Updated: 2026-10-28T01:47:44.231Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.