PT-2025-41188 · Microsoft+1 · Windows+1

Michael Lappas · Published 2025-10-07 · Updated 2026-01-25 · CVE-2025-62186

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Anki versions prior to 25.02.5

Description A specially crafted shared deck on Windows can lead to the execution of arbitrary commands when playing audio due to improper handling of URL schemes.

Recommendations Update to version 25.02.5 or later.

Fix

Weakness Enumeration

CWE-829

Related Identifiers

CVE-2025-62186

Affected Products

Anki

Windows

References · 7

• https://osv.dev/vulnerability/CVE-2025-62186 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-62186 · Security Note
• https://github.com/ankitects/anki/releases/tag/25.02.5 · Note
• https://twitter.com/PlatinumSkies25/status/2015399866164207782 · Twitter Post
• https://t.me/CVEtracker/34375 · Telegram Post
• https://twitter.com/CVEnew/status/1975674510771683514 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1975798391645893096 · Twitter Post