CVE-2024-26020: Ankiweb Anki

High severity, CVSS 8.8. EPSS: 15.2% chance of exploitation in the next 30 days.

An arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead to a arbitrary code execution. An attacker can send malicious flashcard to trigger this vulnerability.

Affected products

• Ankiweb Anki: version 24.04 only

Published 2024-07-22. Last modified 2026-06-17.