CVE-2026-114379 | EKKOLearnAI ekko-studio up to 1.0.6 Media Generation API media.ts saveGeneratedImages output_path file inclusion (Issue 3319)

October 21, 2026 Yanac

A vulnerability has been found in EKKOLearnAI ekko-studio up to 1.0.6 and classified as problematic. This vulnerability affects the function saveGeneratedImages of the file packages/server/src/modules/studio/controllers/media.ts of the component Media Generation API. This manipulation of the argument output_path causes file inclusion.

This vulnerability is registered as CVE-2026-114379. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to apply a patch to fix this issue.VulDB Recent EntriesRead More