Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2025-2394

Disclosure of Alibaba (OSS) Keys In Ecovacs Home Android and iOS Mobile Applications

Description

Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service (OSS), leading to sensitive data disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ecovacs Ecovacs Mobile and Android Application

Default version status: unaffected

  • 3.3.0affected

References