CVE-2025-2394: Ecovacs Mobile And Android Application

Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days.

Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service (OSS), leading to sensitive data disclosure.

Affected products

• Ecovacs Ecovacs Mobile And Android Application: version 3.3.0 only

Published 2025-05-23. Last modified 2026-06-17.