EKKOLearnAI

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

EKKOLearnAI records in CISA KEV

No EKKOLearnAI vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-78995 CVE-2026-114379 · GHSA-622g-c849-p3ww

File inclusion in EKKOLearnAI ekko-studio Media Generation API

LOW 24

A flaw has been found in EKKOLearnAI ekko-studio up to 1.0.6.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00272 Published 2026-10-21 No fix listed CWE-73

TI-2026-75465 CVE-2026-111679 · GHSA-rc9w-795f-h5qm

Missing authorization in Ekko Studio lets users clear login lockouts

LOW 23

Ekko Studio through 0.7.36 contains a missing authorization vulnerability that allows any authenticated non-super_admin user to list and clear server-wide login lockouts via /api/auth/locked-ips.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00223 Published 2026-10-16 No fix listed CWE-862

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0