Authorization Vulnerability in Ech0 Product by Lin Snow

CVE-2026-79669

What is CVE-2026-79669?

The Ech0 product, prior to version 4.4.3, exhibits a significant security flaw by failing to enforce authorization checks on its system log endpoints. This vulnerability permits any authenticated user without admin privileges to access and stream all server logs, presenting a substantial risk of exposing sensitive information. Attackers can exploit this flaw via specific API endpoints to gather reconnaissance data, including internal file paths and application state, which could lead to further compromise of the system.

References