Is there a patch available for CVE-2026-59153?

Yes, a patch is available for CVE-2026-59153. Update the affected software to the latest version immediately.

Anki CVE-2026-59153

Q: What is the CVSS score of CVE-2026-59153?

CVE-2026-59153 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-42112 LOW

Origin Validation Error (CWE-346)

2026-07-07 GitHub_M

GHSA-869j-r97x-hx2g

Information Disclosure Anki

2.1

CVSS 4.0 · Vendor: GitHub_M

Severity by source

Vendor (GitHub_M) PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

4.2 MEDIUM

AC:H reflects the dual requirement of Anki running and a non-PNA browser; UI:R for mandatory malicious-site visit; no availability impact evident from the description.

3.1 AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

4.0 AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

Patch available

Jul 07, 2026 - 23:01 EUVD

Analysis Generated

Jul 07, 2026 - 22:10 vuln.today

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

1 pypi packages depend on aqt (1 direct, 0 indirect)

Ecosystem-wide dependent count for version 25.9.3.

DescriptionCVE.org

Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, Anki launches a local HTTP server to serve media files and web pages for parts of its interface, but requests from other origins were not sufficiently blocked. A malicious website could potentially trigger side-effecting requests to the local server, with severity varying by browser depending on Private Network Access protections. This issue is fixed in version 25.09.3.

AnalysisAI

Cross-origin request forgery against Anki's local HTTP server allows a malicious website to trigger unauthorized side-effecting requests to the application while it is running on the victim's machine. All Anki versions prior to 25.09.3 are affected (CPE: cpe:2.3:a:ankitects:anki:*:*:*:*:*:*:*:*). The practical severity varies significantly by browser: implementations with Private Network Access (PNA) protections block such requests by default, limiting real-world impact to older or less-restrictive browser configurations. No public exploit identified at time of analysis, though security researcher Tavis Ormandy (Google Project Zero) publicly discussed the issue on X, indicating independent researcher awareness.

Technical ContextAI

Anki (by Ankitects) runs a local HTTP server on the user's machine to serve media files and web-based UI components - a common pattern in desktop applications that embed web rendering. CWE-346 (Origin Validation Error) is the root cause: the server failed to validate or reject requests originating from external web origins, making it reachable from any webpage loaded in the user's browser via JavaScript fetch or XMLHttpRequest calls targeting localhost. The Private Network Access (PNA) specification, implemented in Chromium-based browsers, is intended to require explicit opt-in (via CORS preflight with Access-Control-Allow-Private-Network) before public-internet pages can reach localhost services. The vulnerability's exploitability is therefore gated on whether the victim's browser enforces PNA - reflected in the CVSS 4.0 AT:P (attack requirements present) metric.

RemediationAI

Vendor-released patch: 25.09.3. Users should upgrade to Anki 25.09.3 or later, available from the official release page at https://github.com/ankitects/anki/releases/tag/25.09.3. The underlying fix is documented in commit 858e5689d0e4fd24f74856c7e8f245412694a219. As a compensating control prior to patching, users can ensure their browser enforces Private Network Access protections - Chromium-based browsers with PNA enabled already block the attack vector at the browser layer, though this should not be treated as a permanent substitute for upgrading. There are no known side effects of upgrading to 25.09.3.