CVE-2025-2394

Ecovacs Home <3.3.0 - Info Disclosure

Title source: llm

Description

Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service (OSS), leading to sensitive data disclosure.

Scores

EPSS 0.0004
EPSS Percentile 10.3%

Classification

CWE
CWE-798
Status draft

Timeline

Published May 23, 2025
Tracked Since Feb 18, 2026