CVE-2025-62185 – Ankitects Anki Arbitrary File Execution via YouTube Downloader

CVE ID : CVE-2025-62185

Published : Oct. 7, 2025, 9:15 p.m. | 1 hour, 20 minutes ago

Description : In Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, and this is executed for a YouTube link in the deck. The executable name could be youtube-dl.exe or yt-dlp.exe or yt-dlp_x86.exe.

Severity: 6.7 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…