https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-22T20:40:46.250107+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-114379 CVE-2026-114379 — EKKOLearnAI ekko-studio Media Generation API media.ts saveGeneratedImages file inclusion 2026-10-22T20:40:46.251793+00:00

Affected: EKKOLearnAI ekko-studio

A flaw has been found in EKKOLearnAI ekko-studio up to 1.0.6. This vulnerability affects the function saveGeneratedImages of the file packages/server/src/modules/studio/controllers/media.ts of the component Media Generation API. This manipulation of the argument output_path causes file inclusion. Remote exploitation of the attack is possible. Patch name: 1d42459c292f89e412f7f6243829e7fed2e85bf5. It is recommended to apply a patch to fix this issue.