CVE-2026-59153
LowCVSS 2.1Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
Anki prior to version 25.09.3 runs a local HTTP server that does not sufficiently block requests from other origins. A malicious website could send requests to this server, potentially causing side effects.
Risk Assessment
The risk involves potential unauthorized operations on the local Anki server by a malicious website, which could compromise data integrity or application functionality.
Recommendation
It is recommended to immediately update Anki to version 25.09.3 or later, which includes a fix to block requests from other origins.
Other vulnerabilities in Anki
See all- CVE-2026-64677Medium
In Anki prior to 25.09.3, endpoints in Anki's local HTTP server do not adequately constrain requested media and built-in data paths, allowing scripts served from shared decks, or malicious websites combined with an origin-check bypass, to read local files through directory traversal.
- CVE-2026-58266Medium
A vulnerability in Anki prior to 25.09.4 allows malicious card packages with embedded iframes to access the internal localhost API, enabling reading of arbitrary files accessible to the Anki process and exfiltrating them over the network.
- CVE-2025-62187Low
In Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux (media file pathnames are not necessarily relative to the media folder).
- CVE-2025-62186Medium
Ankitects Anki before 25.02.5 allows a crafted shared deck on Windows to execute arbitrary commands when playing audio because of URL scheme mishandling.
- CVE-2025-62185Medium
In Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, which is executed for a YouTube link in the deck. The executable name could be youtube-dl.exe, yt-dlp.exe, or yt-dlp_x86.exe.
Original NVD description (English source)
Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, Anki launches a local HTTP server to serve media files and web pages for parts of its interface, but requests from other origins were not sufficiently blocked. A malicious website could potentially trigger side-effecting requests to the local server, with severity varying by browser depending on Private Network Access protections. This issue is fixed in version 25.09.3.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS