What is CVE-2026-58266?

CVE-2026-58266 is a medium-severity vulnerability in Ankitects Anki, classified under Origin Validation Error. CVSS score: 6.5/10. Published 2026-07-07.

How severe is CVE-2026-58266?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Ankitects Anki

CVE-2026-58266

Anki is a program for creating and reviewing flashcards. Prior to 25.09.4, Anki's webview-based pages communicate with the Rust backend using an internal localhost API, and user scripts included via iframes in the editor can access this AP…

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N.

Affected products

Ankitects Anki — versions < 25.09.4

Weakness classification (CWE)

CWE-346 — Origin Validation Error

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2026-58266?: CVE-2026-58266 is a medium-severity vulnerability in Ankitects Anki, classified under Origin Validation Error. CVSS score: 6.5/10. Published 2026-07-07.
How severe is CVE-2026-58266?: Medium severity. CVSS v3 base score is 6.5 out of 10.