Vulnerability-Lookup

GHSA-CW6H-FFMH-X6VH

Vulnerability from github – Published: 2026-06-19 22:10 – Updated: 2026-06-19 22:10

Summary

Anki: User scripts in iframes have access to the internal Anki API

Details

Summary

Anki's webview-based pages communicate with the Rust backend using an internal localhost API. Anki implements measures to prevent user scripts run in the reviewer/editor from accessing this API (https://github.com/ankitects/anki/pull/3925) but it inadvertently allows access to scripts included via iframes in the editor. While overall only a limited set of API methods are exposed, some such as getImageForOcclusion can read arbitrary files.

CWE: CWE-22 (Path Traversal) Reporter: Bankde (Eakasit)

Affected Products

Ecosystem	Package	Affected Versions
PyPI	`aqt`	`<= 25.09.3`

Impact

Any desktop Anki user (Windows, macOS, Linux) who imports an untrusted .apkg and views card with an embedded iframe is vulnerable. No special configuration is required. The attacker can read any file accessible to the Anki process and exfiltrate its contents over the network.

Patches

A patch is available in 25.09.4

Workarounds

Do not import .apkg files from untrusted sources.
Inspect .apkg contents (it's a ZIP) for .html/.svg files with <script> tags before importing.
Block unexpected outbound network requests from the Anki process at the firewall level.

References

Vulnerability report: Anki arbitrary file read vulnerability (with exfiltration) — Bankde (Eakasit)
Affected source: qt/aqt/mediasrv.py::_handle_local_file_request
Related prior CVEs: CVE-2024-29073, CVE-2024-32484, CVE-2025-62185, CVE-2025-62187

Severity

6.5 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "last_known_affected_version_range": "\u003c= 25.9.3"
      },
      "package": {
        "ecosystem": "PyPI",
        "name": "aqt"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "25.9.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [],
  "database_specific": {
    "cwe_ids": [
      "CWE-22"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-06-19T22:10:19Z",
    "nvd_published_at": null,
    "severity": "MODERATE"
  },
  "details": "## Summary\n\nAnki\u0027s webview-based pages communicate with the Rust backend using an internal localhost API. Anki implements measures to prevent user scripts run in the reviewer/editor from accessing this API (https://github.com/ankitects/anki/pull/3925) but it inadvertently allows access to scripts included via iframes in the editor. While overall only a limited set of API methods are exposed, some such as `getImageForOcclusion` can read arbitrary files.\n\n**CWE:** CWE-22 (Path Traversal)\n**Reporter:** Bankde (Eakasit)\n\n## Affected Products\n\n| Ecosystem | Package | Affected Versions |\n| --------- | ------- | ----------------- |\n| PyPI      | `aqt`   | `\u003c= 25.09.3`      |\n\n## Impact\n\nAny desktop Anki user (Windows, macOS, Linux) who imports an untrusted `.apkg` and views card with an embedded iframe is vulnerable. No special configuration is required. The attacker can read any file accessible to the Anki process and exfiltrate its contents over the network.\n\n## Patches\n\nA patch is available in 25.09.4\n\n## Workarounds\n\n- Do not import `.apkg` files from untrusted sources.\n- Inspect `.apkg` contents (it\u0027s a ZIP) for `.html`/`.svg` files with `\u003cscript\u003e` tags before importing.\n- Block unexpected outbound network requests from the Anki process at the firewall level.\n\n## References\n\n- Vulnerability report: _Anki arbitrary file read vulnerability (with exfiltration)_ \u2014 Bankde (Eakasit)\n- Affected source: [`qt/aqt/mediasrv.py::_handle_local_file_request`](https://github.com/ankitects/anki/blob/5a9b54e9380c66e26391f0827867d2a728107836/qt/aqt/mediasrv.py#L223)\n- Related prior CVEs: [CVE-2024-29073](https://nvd.nist.gov/vuln/detail/CVE-2024-29073), [CVE-2024-32484](https://nvd.nist.gov/vuln/detail/CVE-2024-32484), [CVE-2025-62185](https://nvd.nist.gov/vuln/detail/CVE-2025-62185), [CVE-2025-62187](https://nvd.nist.gov/vuln/detail/CVE-2025-62187)",
  "id": "GHSA-cw6h-ffmh-x6vh",
  "modified": "2026-06-19T22:10:19Z",
  "published": "2026-06-19T22:10:19Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/ankitects/anki/security/advisories/GHSA-cw6h-ffmh-x6vh"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/ankitects/anki"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Anki: User scripts in iframes have access to the internal Anki API"
}

CVE-2026-58266 (GCVE-0-2026-58266)

Vulnerability from cvelistv5 – Published: 2026-07-07 21:13 – Updated: 2026-07-08 13:23

Title

Anki: User scripts in iframes have access to the internal Anki API

Summary

Anki is a program for creating and reviewing flashcards. Prior to 25.09.4, Anki's webview-based pages communicate with the Rust backend using an internal localhost API, and user scripts included via iframes in the editor can access this API despite protections intended to block reviewer and editor scripts. A malicious imported card package with an embedded iframe can use exposed API methods such as getImageForOcclusion to read arbitrary files accessible to the Anki process and exfiltrate them over the network. This issue is fixed in version 25.09.4.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-346 - Origin Validation Error

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/ankitects/anki/security/adviso…	x_refsource_CONFIRM
https://github.com/ankitects/anki/commit/b2b68d82…	x_refsource_MISC
https://github.com/ankitects/anki/releases/tag/25.09.4	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
ankitects	anki	Affected: < 25.09.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-58266",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-08T13:23:23.495354Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-08T13:23:46.962Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "anki",
          "vendor": "ankitects",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 25.09.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Anki is a program for creating and reviewing flashcards. Prior to 25.09.4, Anki\u0027s webview-based pages communicate with the Rust backend using an internal localhost API, and user scripts included via iframes in the editor can access this API despite protections intended to block reviewer and editor scripts. A malicious imported card package with an embedded iframe can use exposed API methods such as getImageForOcclusion to read arbitrary files accessible to the Anki process and exfiltrate them over the network. This issue is fixed in version 25.09.4."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-346",
              "description": "CWE-346: Origin Validation Error",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-07T21:13:42.650Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/ankitects/anki/security/advisories/GHSA-cw6h-ffmh-x6vh",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/ankitects/anki/security/advisories/GHSA-cw6h-ffmh-x6vh"
        },
        {
          "name": "https://github.com/ankitects/anki/commit/b2b68d829e853da51b5de8aad6c13b53e90bc20d",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ankitects/anki/commit/b2b68d829e853da51b5de8aad6c13b53e90bc20d"
        },
        {
          "name": "https://github.com/ankitects/anki/releases/tag/25.09.4",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ankitects/anki/releases/tag/25.09.4"
        }
      ],
      "source": {
        "advisory": "GHSA-cw6h-ffmh-x6vh",
        "discovery": "UNKNOWN"
      },
      "title": "Anki: User scripts in iframes have access to the internal Anki API"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-58266",
    "datePublished": "2026-07-07T21:13:42.650Z",
    "dateReserved": "2026-06-29T21:54:30.331Z",
    "dateUpdated": "2026-07-08T13:23:46.962Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

GHSA-CW6H-FFMH-X6VH

Summary

Affected Products

Impact

Patches

Workarounds

References

CVE-2026-58266 (GCVE-0-2026-58266)

Tags

Sightings

Nomenclature