CVE-2025-62187

LOW

Anki < 25.02.6 - Path Traversal

Title source: rule

Description

In Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux (media file pathnames are not necessarily relative to the media folder).

References (3)

Scores

CVSS v3 2.9
EPSS 0.0002
EPSS Percentile 3.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Classification

CWE
CWE-23
Status published

Affected Products (1)

ankitects/anki < 25.02.6

Timeline

Published Oct 07, 2025
Tracked Since Feb 18, 2026