ekko-studio vulnerabilities

CVEs whose affected-version data names the ekko-studio package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111679Medium· 5.4

yesterday

Ekko Studio through 0.7.36 Missing Authorization via /api/auth/locked-ips

Ekko Studio through 0.7.36 contains a missing authorization vulnerability that allows any authenticated non-super_admin user to list and clear server-wide login lockouts via /api/auth/locked-ips. Attackers can send DELETE requests withou…

▾ SunlitEKKOLearnAI · ekko-studiovia CVEORG