CVE-2025-62185

In Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, and this is executed for a YouTube link in the deck. The executable name could be youtube-dl.exe or yt-dlp.exe or yt-dlp_x86.exe.

CVSS v3 6.7 MEDIUM

6.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.4 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/ankitects/anki/commit/5080451829505842b16d4a50f398ad44560a3e48	Patch
https://github.com/ankitects/anki/commit/6213c9b6f99ebda181004f8915b92fe3618b939	Broken Link
https://github.com/ankitects/anki/compare/25.02.4...25.02.5	Patch

Configurations

Configuration 1 (hide)

cpe:2.3:a:ankitects:anki:*:*:*:*:*:*:*:*

History

08 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) En Anki de Ankitects antes de 25.02.5, un mazo compartido manipulado puede colocar un ejecutable de descarga de YouTube en la carpeta de medios, y este se ejecuta para un enlace de YouTube en el mazo. El nombre del ejecutable podría ser youtube-dl.exe o yt-dlp.exe o yt-dlp_x86.exe.

Information

Published : 2025-10-07 21:15

Updated : 2026-10-08 13:10

NVD link : CVE-2025-62185

Mitre link : CVE-2025-62185

CVE.ORG link : CVE-2025-62185

JSON object : View

Products Affected

ankitects

anki

CWE

CWE-427

Uncontrolled Search Path Element

{"id": "CVE-2025-62185", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-62185", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-08T14:59:03.482415Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 1.4}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "Ankitects", "product": "Anki", "versions": [{"status": "affected", "version": "0", "lessThan": "25.02.5", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-07T21:15:38.683", "references": [{"url": "https://github.com/ankitects/anki/commit/5080451829505842b16d4a50f398ad44560a3e48", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "https://github.com/ankitects/anki/commit/6213c9b6f99ebda181004f8915b92fe3618b939", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "https://github.com/ankitects/anki/compare/25.02.4...25.02.5", "tags": ["Patch"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "cve@mitre.org", "description": [{"lang": "en", "value": "CWE-427"}]}], "descriptions": [{"lang": "en", "value": "In Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, and this is executed for a YouTube link in the deck. The executable name could be youtube-dl.exe or yt-dlp.exe or yt-dlp_x86.exe."}, {"lang": "es", "value": "En Anki de Ankitects antes de 25.02.5, un mazo compartido manipulado puede colocar un ejecutable de descarga de YouTube en la carpeta de medios, y este se ejecuta para un enlace de YouTube en el mazo. El nombre del ejecutable podr\u00eda ser youtube-dl.exe o yt-dlp.exe o yt-dlp_x86.exe."}], "lastModified": "2026-10-08T13:10:00.200", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ankitects:anki:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BFB0E5CE-8F6D-4E3B-8AE9-71561E0BAC24", "versionEndExcluding": "25.02.5"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}